Dreamer CMS Project vulnerabilities
We track 1 vulnerability in Dreamer CMS Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Dreamer CMS Project vulnerabilities
- 8.8 High severity
CMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/admin/ThemesController.java. The manipulation leads to path traversal. The attac