Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive files to be read.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://gitee.com/iteachyou/dreamer_cms/issues/I6NOFN |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-11-29T00:00:00
Updated: 2024-08-02T20:53:21.951Z
Reserved: 2023-10-30T00:00:00
Link: CVE-2023-46886
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-11-29T05:15:07.863
Modified: 2023-12-05T13:02:07.903
Link: CVE-2023-46886
Redhat
No data.