CVE-2023-3578: A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The…

PriorityP267critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EXPLOIT

EPSS

3.41%

87.4th percentile

A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233371.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dedecms	dedecms	—	—

Detection & IOCsextracted from sources · hover to see the quote

path/co_do.php↗

url/co_do.php?rssurl=https://{{interactsh-url}}↗

→Detect SSRF exploitation attempts by monitoring HTTP GET requests to co_do.php with an external URL supplied in the rssurl parameter. ↗
→Confirm DedeCMS presence on a target by checking for the string 'DedeCms' (case-insensitive) in the HTTP response body before probing for the vulnerability. ↗
→Out-of-band detection: a successful SSRF exploit will trigger an outbound DNS or HTTP callback from the server; monitor for unexpected DNS/HTTP interactions originating from the target host. ↗

·The vulnerability is unauthenticated (PR:N, UI:N), meaning no credentials are required to exploit co_do.php via the rssurl parameter. ↗
·Exploitation requires the target to be running DedeCMS version 5.7.109 specifically; verify the version before acting on detections. ↗
·EPSS score of 0.8113 (99.16th percentile) indicates very high probability of exploitation in the wild; prioritize detection and patching accordingly. ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.05.2MEDIUMAV:A/AC:L/Au:S/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.