Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-7091
HistoryDec 24, 2023 - 9:15 p.m.

Out-of-bounds

2023-12-2421:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
dreamer cms
unrestricted upload
remote attack
exploit
public disclosure
vdb-248938
vendor non-responsive

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.1%

A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /upload/uploadFile. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-248938 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CPENameOperatorVersion
dreamer_cmseq4.1.3

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.1%

Related for PRION:CVE-2023-7091