CVE-2024-3311 Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal

A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/admin/ThemesController.java. The manipulation leads to path traversal. The attack can be launched remotely. The explo...

CVE-2024-3311

A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/admin/ThemesController.java. The manipulation leads to path traversal. The attack can be launched remotely. The explo...

PT-2024-25118

Name of the Vulnerable Software and Affected Versions Dreamer CMS versions up to 4.1.3.0 Description A critical issue has been found, affecting the ZipUtils.unZipFiles function of the file controller/admin/ThemesController.java. This leads to path traversal and can be exploited remotely. The issu...

CVE-2024-3311: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/admin/ThemesController.java. The manipulation leads to path traversal. The attack can be launched remotely. The explo...