CVE-2023-3578 DedeCMS co_do.php server-side request forgery
Attackers can exploit a server-side request forgery vulnerability in DedeCMS to interact with internal systems via the rssurl parameter.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-3578?
CVE-2023-3578 is a medium-severity server-side request forgery vulnerability in Dedecms Dedecms, published on 10 Jul 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233371.
Weakness: CWE-918
Which versions are affected by CVE-2023-3578?
It affects 1 product.
Products include Dedecms Dedecms.
How do I fix CVE-2023-3578?
No fix has been published for CVE-2023-3578 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2023-3578 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-3578 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Dedecms Dedecms
Sources
Also known as GHSA-6m67-x55h-jgr8.