CVE-2024-4790

CVE-2024-4790 is a path traversal vulnerability in DedeCMS 5.7.114, specifically affecting the /sys_verifies.php?action=view file. An unauthenticated attacker can exploit this by manipulating the 'filename' argument to access arbitrary files on the server, such as /etc/passwd. With a CVSS score of 7.5 (High), this vulnerability allows for remote compromise of confidentiality with low attack complexity. While the exploit has been publicly disclosed, there is no evidence of active exploitation, Metasploit modules, or significant community discussion, and the vendor has not responded to disclosure attempts.