Directory traversal

2023-11-2905:15:00

PRIOn knowledge base

www.prio-n.com

dreamer cms

version 4.0.1

directory traversal

template management

sensitive files

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.2%

JSON

Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive files to be read.

CPENameOperatorVersion
dreamer_cmslt4.0.1

CPE	Name	Operator	Version
	dreamer_cms	lt	4.0.1

References

gitee.com/iteachyou/dreamer_cms/issues/I6NOFN