CVE-2023-4743

Dreamer CMS up to version 4.1.3 is affected by a vulnerability in /upload/ueditorConfig?action=config that allows access to files or directories due to an unknown function. The issue can be exploited remotely with high attack complexity, and public exploits have been disclosed. Several connected ...

CVE-2023-4743 Dreamer CMS file access

A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?action=config. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The complexity of ...