High · 8.8 CVE-2022-43031 EUVD-2022-46080GHSA-6j6v-f6cj-wwmw

DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accoun…

Published Nov 9, 2022 · Updated May 1, 2025 · Assigned by mitre

Description

DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords.

References

https://github.com/cai-niao98/Dedecmsv6
https://gist.github.com/cai-niao98/77a7aa934492c2d651b37b75243eda0b