DreamFactory vulnerabilities
We track 2 vulnerabilities in DreamFactory products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest DreamFactory vulnerabilities
- 7.2 High severity
Dreamfactory Core: Improper Limitation of a Pathname to a Restricted Directory
An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.
- 7.2 High severity
DreamFactory: Improper Neutralization of Special Elements used in an OS Command
DreamFactory saveZipFile Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of DreamFactory. Authentication is required to exploit this vulnerability. The specif