CVE-2024-0358

Summary

A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250125 was assigned to this vulnerability.

Affected Software

VendorProductVersion RangeStatus
DeShangDSO2O4.0affected
DeShangDSO2O4.1affected

Weaknesses

  • CWE-284: CWE-284 Improper Access Controls

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References