CVE-2023-4170

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-236186 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79

• https://github.com/Wkingxc/CVE/blob/master/dedebiz_XSS.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.236186Permissions Required, Third Party Advisory
• https://vuldb.com/?id.236186Permissions Required, Third Party Advisory
• https://github.com/Wkingxc/CVE/blob/master/dedebiz_XSS.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.236186Permissions Required, Third Party Advisory
• https://vuldb.com/?id.236186Permissions Required, Third Party Advisory

Published

Aug 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41693Cross-Site Request Forgery (CSRF) vulnerability in edward_pl…8.8
• CVE-2023-41694Cross-Site Request Forgery (CSRF) vulnerability in Realbig T…8.8
• CVE-2023-41695Missing Authorization vulnerability in Adnan Analytify wp-an…8.8
• CVE-2023-41696Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-41697Cross-Site Request Forgery (CSRF) vulnerability in Nikunj So…8.8
• CVE-2023-41699URL Redirection to Untrusted Site ('Open Redirect') vulnerab…6.1
• CVE-2023-41703User ID references at mentions in document comments were not…6.1
• CVE-2023-41704Processing of CID references at E-Mail can be abused to inje…6.1
• CVE-2023-41705Processing of user-defined DAV user-agent strings is not lim…6.5
• CVE-2023-41706Processing time of drive search expressions now gets monitor…6.5
• CVE-2023-41707Processing of user-defined mail search expressions is not li…6.5
• CVE-2023-41708References to the "app loader" functionality could contain r…5.4