2023-04-14 08:00:34 +00:00
{
2023-04-14 14:00:34 +00:00
"data_version" : "4.0" ,
2023-04-14 08:00:34 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2023-2056" ,
2023-04-14 14:00:34 +00:00
"ASSIGNER" : "cna@vuldb.com" ,
"STATE" : "PUBLIC"
2023-04-14 08:00:34 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2023-04-14 14:00:34 +00:00
"value" : "A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file module_main.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225941 was assigned to this vulnerability."
} ,
{
"lang" : "deu" ,
"value" : "Eine kritische Schwachstelle wurde in DedeCMS bis 5.7.87 gefunden. Es geht hierbei um die Funktion GetSystemFile der Datei module_main.php. Dank Manipulation mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-94 Code Injection" ,
"cweId" : "CWE-94"
}
]
}
]
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "n/a" ,
"product" : {
"product_data" : [
{
"product_name" : "DedeCMS" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "5.7.0"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.1"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.2"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.3"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.4"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.5"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.6"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.7"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.8"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.9"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.10"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.11"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.12"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.13"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.14"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.15"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.16"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.17"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.18"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.19"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.20"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.21"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.22"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.23"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.24"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.25"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.26"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.27"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.28"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.29"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.30"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.31"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.32"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.33"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.34"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.35"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.36"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.37"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.38"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.39"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.40"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.41"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.42"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.43"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.44"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.45"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.46"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.47"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.48"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.49"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.50"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.51"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.52"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.53"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.54"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.55"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.56"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.57"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.58"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.59"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.60"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.61"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.62"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.63"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.64"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.65"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.66"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.67"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.68"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.69"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.70"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.71"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.72"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.73"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.74"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.75"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.76"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.77"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.78"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.79"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.80"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.81"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.82"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.83"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.84"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.85"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.86"
} ,
{
"version_affected" : "=" ,
"version_value" : "5.7.87"
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://vuldb.com/?id.225941" ,
"refsource" : "MISC" ,
"name" : "https://vuldb.com/?id.225941"
} ,
{
"url" : "https://vuldb.com/?ctiid.225941" ,
"refsource" : "MISC" ,
"name" : "https://vuldb.com/?ctiid.225941"
} ,
{
"url" : "https://gitee.com/ashe-king/cve/blob/master/dedecms%20rce2.md" ,
"refsource" : "MISC" ,
"name" : "https://gitee.com/ashe-king/cve/blob/master/dedecms%20rce2.md"
}
]
} ,
"credits" : [
{
"lang" : "en" ,
"value" : "asheking (VulDB User)"
}
] ,
"impact" : {
"cvss" : [
{
"version" : "3.1" ,
"baseScore" : 6.3 ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" ,
"baseSeverity" : "MEDIUM"
} ,
{
"version" : "3.0" ,
"baseScore" : 6.3 ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" ,
"baseSeverity" : "MEDIUM"
} ,
{
"version" : "2.0" ,
"baseScore" : 6.5 ,
2023-10-22 11:00:46 +00:00
"vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P"
2023-04-14 08:00:34 +00:00
}
]
}
}
