Lucene search

K
cve[email protected]CVE-2023-45907
HistoryOct 17, 2023 - 2:15 p.m.

CVE-2023-45907

2023-10-1714:15:10
CWE-352
web.nvd.nist.gov
62
dreamer cms
v4.1.3
csrf
cross-site request forgery
/admin/variable/delete
cve-2023-45907
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

24.1%

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.

Affected configurations

NVD
Node
dreamer_cms_projectdreamer_cmsMatch4.1.3

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

24.1%

Related for CVE-2023-45907