CVE-2023-46886

critical

Description

Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive files to be read.

References

https://gitee.com/iteachyou/dreamer_cms/issues/I6NOFN

Details

Source: Mitre, NVD

Published: 2023-11-29

Updated: 2025-04-04

Risk Information

CVSS v2

Base Score: 9.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00857

Detections

Analytics