exploitDog

CVE-2023-27084

Опубликовано: 16 мар. 2023

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.

Ссылки

https://gitee.com/isoftforce/dreamer_cms/issues/I6GCUN
Broken Link
https://github.com/iteachyou-wjn/dreamer_cms/issues/9
Exploit
Issue Tracking
Third Party Advisory
https://gitee.com/isoftforce/dreamer_cms/issues/I6GCUN
Broken Link
https://github.com/iteachyou-wjn/dreamer_cms/issues/9
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:iteachyou:dreamer_cms:4.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 7%

0.00028

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-732

CWE-732

Связанные уязвимости

GHSA-jx9v-jv5r-x5ff

CVSS3: 5.3

github

почти 3 года назад

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.

EPSS

Процентиль: 7%

0.00028

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-732

CWE-732