CVE-2023-3578

nvd nist nuclei

Published: Jul 10, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233371.

Affected (1)

Products: Dedecms: Dedecms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dedecms Dedecms	Version 5.7.109

Related CWEs

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (6)

https://github.com/nightcloudos/cve/blob/main/SSRF.md

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?ctiid.233371

Source: cna@vuldb.com

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.233371

Source: cna@vuldb.com

Third Party Advisory

https://github.com/nightcloudos/cve/blob/main/SSRF.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://vuldb.com/?ctiid.233371

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.233371

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.