Unscored CVE-2023-48913 EUVD-2023-52940GHSA-832q-jjgp-rmrx

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.

Published Nov 30, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.

References

https://github.com/Tiamat-ron/cms/blob/main/The%20deletion%20function%20of%20the%20Article%20Management%20Office%20exists%20in%20CSRF.md