PT-2023-30253 · Unknown · Dreamer Cms

CVE-2023-46886 · Publicado 2023-11-29 · Atualizado 2024-10-11

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dreamer CMS versions prior to 4.0.1

Description The issue allows for Directory Traversal, where background template management enables arbitrary modification of template files. This can lead to the reading of system-sensitive files.

Recommendations For versions prior to 4.0.1, update to version 4.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the background template management feature until the update is applied.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-46886

Produtos afetados

Dreamer Cms

Referências · 6

• 🔥 https://gitee.com/iteachyou/dreamer_cms/issues/I6NOFN · Exploit
• https://t.me/cvenotify/62296 · Publicação no Telegram
• https://t.me/cvenotify/61461 · Publicação no Telegram
• https://t.me/cvenotify/61420 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-46886 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-46886 · Nota de Segurança