Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:13 a.m.7 views

CVE-2024-2354

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...

6.5CVSS6.7AI score0.00062EPSS
Exploits0References1
NVD
NVD
added 2024/03/10 11:15 a.m.10 views

CVE-2024-2354

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...

6.5CVSS4.6AI score0.00062EPSS
Exploits0References3
Prion
Prion
added 2024/03/10 11:15 a.m.17 views

Cross site request forgery (csrf)

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...

5CVSS6.9AI score0.00062EPSS
Exploits0References3
CVE
CVE
added 2024/03/10 11:0 a.m.69 views

CVE-2024-2354

Dreamer CMS 4.1.3 contains a Cross-Site Request Forgery (CSRF) flaw in the /admin/menu/toEdit endpoint, where manipulating the id parameter can trigger the CSRF. The vulnerability is exploitable remotely and has had public exploits disclosed. Multiple connected sources corroborate the issue witho...

6.5CVSS4.6AI score0.00062EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/10 11:0 a.m.15 views

CVE-2024-2354 Dreamer CMS toEdit cross-site request forgery

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...

5CVSS5AI score0.00062EPSS
Exploits0References3
Rows per page
Query Builder