In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability.

Published Nov 29, 2023 · Updated Nov 26, 2024 · Assigned by mitre