CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-57241: Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in...

Description

Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection.

Classification

CVE ID: CVE-2024-57241

Affected Products

Vendor: n/a

Product: n/a

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.06% (probability of being exploited)

EPSS Percentile: 28.65% (scored less or equal to compared to others)

EPSS Date: 2025-03-12 (when was this score calculated)

References

https://github.com/woshidaheike/dedecms-url-redirection

Timeline