{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2023-2056", "ASSIGNER": "cna@vuldb.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file module_main.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225941 was assigned to this vulnerability." }, { "lang": "deu", "value": "Eine kritische Schwachstelle wurde in DedeCMS bis 5.7.87 gefunden. Es geht hierbei um die Funktion GetSystemFile der Datei module_main.php. Dank Manipulation mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-94 Code Injection", "cweId": "CWE-94" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "n/a", "product": { "product_data": [ { "product_name": "DedeCMS", "version": { "version_data": [ { "version_affected": "=", "version_value": "5.7.0" }, { "version_affected": "=", "version_value": "5.7.1" }, { "version_affected": "=", "version_value": "5.7.2" }, { "version_affected": "=", "version_value": "5.7.3" }, { "version_affected": "=", "version_value": "5.7.4" }, { "version_affected": "=", "version_value": "5.7.5" }, { "version_affected": "=", "version_value": "5.7.6" }, { "version_affected": "=", "version_value": "5.7.7" }, { "version_affected": "=", "version_value": "5.7.8" }, { "version_affected": "=", "version_value": "5.7.9" }, { "version_affected": "=", "version_value": "5.7.10" }, { "version_affected": "=", "version_value": "5.7.11" }, { "version_affected": "=", "version_value": "5.7.12" }, { "version_affected": "=", "version_value": "5.7.13" }, { "version_affected": "=", "version_value": "5.7.14" }, { "version_affected": "=", "version_value": "5.7.15" }, { "version_affected": "=", "version_value": "5.7.16" }, { "version_affected": "=", "version_value": "5.7.17" }, { "version_affected": "=", "version_value": "5.7.18" }, { "version_affected": "=", "version_value": "5.7.19" }, { "version_affected": "=", "version_value": "5.7.20" }, { "version_affected": "=", "version_value": "5.7.21" }, { "version_affected": "=", "version_value": "5.7.22" }, { "version_affected": "=", "version_value": "5.7.23" }, { "version_affected": "=", "version_value": "5.7.24" }, { "version_affected": "=", "version_value": "5.7.25" }, { "version_affected": "=", "version_value": "5.7.26" }, { "version_affected": "=", "version_value": "5.7.27" }, { "version_affected": "=", "version_value": "5.7.28" }, { "version_affected": "=", "version_value": "5.7.29" }, { "version_affected": "=", "version_value": "5.7.30" }, { "version_affected": "=", "version_value": "5.7.31" }, { "version_affected": "=", "version_value": "5.7.32" }, { "version_affected": "=", "version_value": "5.7.33" }, { "version_affected": "=", "version_value": "5.7.34" }, { "version_affected": "=", "version_value": "5.7.35" }, { "version_affected": "=", "version_value": "5.7.36" }, { "version_affected": "=", "version_value": "5.7.37" }, { "version_affected": "=", "version_value": "5.7.38" }, { "version_affected": "=", "version_value": "5.7.39" }, { "version_affected": "=", "version_value": "5.7.40" }, { "version_affected": "=", "version_value": "5.7.41" }, { "version_affected": "=", "version_value": "5.7.42" }, { "version_affected": "=", "version_value": "5.7.43" }, { "version_affected": "=", "version_value": "5.7.44" }, { "version_affected": "=", "version_value": "5.7.45" }, { "version_affected": "=", "version_value": "5.7.46" }, { "version_affected": "=", "version_value": "5.7.47" }, { "version_affected": "=", "version_value": "5.7.48" }, { "version_affected": "=", "version_value": "5.7.49" }, { "version_affected": "=", "version_value": "5.7.50" }, { "version_affected": "=", "version_value": "5.7.51" }, { "version_affected": "=", "version_value": "5.7.52" }, { "version_affected": "=", "version_value": "5.7.53" }, { "version_affected": "=", "version_value": "5.7.54" }, { "version_affected": "=", "version_value": "5.7.55" }, { "version_affected": "=", "version_value": "5.7.56" }, { "version_affected": "=", "version_value": "5.7.57" }, { "version_affected": "=", "version_value": "5.7.58" }, { "version_affected": "=", "version_value": "5.7.59" }, { "version_affected": "=", "version_value": "5.7.60" }, { "version_affected": "=", "version_value": "5.7.61" }, { "version_affected": "=", "version_value": "5.7.62" }, { "version_affected": "=", "version_value": "5.7.63" }, { "version_affected": "=", "version_value": "5.7.64" }, { "version_affected": "=", "version_value": "5.7.65" }, { "version_affected": "=", "version_value": "5.7.66" }, { "version_affected": "=", "version_value": "5.7.67" }, { "version_affected": "=", "version_value": "5.7.68" }, { "version_affected": "=", "version_value": "5.7.69" }, { "version_affected": "=", "version_value": "5.7.70" }, { "version_affected": "=", "version_value": "5.7.71" }, { "version_affected": "=", "version_value": "5.7.72" }, { "version_affected": "=", "version_value": "5.7.73" }, { "version_affected": "=", "version_value": "5.7.74" }, { "version_affected": "=", "version_value": "5.7.75" }, { "version_affected": "=", "version_value": "5.7.76" }, { "version_affected": "=", "version_value": "5.7.77" }, { "version_affected": "=", "version_value": "5.7.78" }, { "version_affected": "=", "version_value": "5.7.79" }, { "version_affected": "=", "version_value": "5.7.80" }, { "version_affected": "=", "version_value": "5.7.81" }, { "version_affected": "=", "version_value": "5.7.82" }, { "version_affected": "=", "version_value": "5.7.83" }, { "version_affected": "=", "version_value": "5.7.84" }, { "version_affected": "=", "version_value": "5.7.85" }, { "version_affected": "=", "version_value": "5.7.86" }, { "version_affected": "=", "version_value": "5.7.87" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://vuldb.com/?id.225941", "refsource": "MISC", "name": "https://vuldb.com/?id.225941" }, { "url": "https://vuldb.com/?ctiid.225941", "refsource": "MISC", "name": "https://vuldb.com/?ctiid.225941" }, { "url": "https://gitee.com/ashe-king/cve/blob/master/dedecms%20rce2.md", "refsource": "MISC", "name": "https://gitee.com/ashe-king/cve/blob/master/dedecms%20rce2.md" } ] }, "credits": [ { "lang": "en", "value": "asheking (VulDB User)" } ], "impact": { "cvss": [ { "version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "baseSeverity": "MEDIUM" }, { "version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "baseSeverity": "MEDIUM" }, { "version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P" } ] } }