Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection.
Loading...
Loading...
Score 5.1 from GitHub Security Advisory published 2025-02-12. NVD baseline CVSS 6.5; sources differ by 1.4.
Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection.
February 11, 2025
April 1, 2025
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Every time one of our enrichment pipelines (NVD, MITRE cvelistV5, EPSS, CISA KEV, GHSA, OSV, vendor advisories) ran against this CVE. Most recent first.
Working exploit code is in the public domain (1 GitHub PoC). Defenders should treat patch urgency accordingly — public PoCs typically lead to mass-exploitation within 24-72 hours.
dedecms-url 重定向
Open source ↗DedeCMS - Open Redirect via download.php
Open source ↗See which npm, PyPI, Go, and Maven packages are affected by CVE-2024-57241
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.
CWE-601