Medium · 5.3 CVE-2023-27084 EUVD-2023-30872GHSA-jx9v-jv5r-x5ff

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the Attachment…

Published Mar 16, 2023 · Updated Feb 26, 2025 · Assigned by mitre

Description

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.

References

https://gitee.com/isoftforce/dreamer_cms/issues/I6GCUN
https://github.com/iteachyou-wjn/dreamer_cms/issues/9