Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/04/2024 Updated: 17/05/2024

A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/admin/ThemesController.java. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.3.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-259369 was assigned to this vulnerability.

CWE-22 https://vuldb.com/?id.259369 https://vuldb.com/?ctiid.259369 https://vuldb.com/?submit.303874 https://gitee.com/y1336247431/poc-public/issues/I9BA5R https://gitee.com/iteachyou/dreamer_cms/releases/tag/Latest_Stable_Release_4.1.3.1 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-3311

Vulnerability Summary

References

Vulmon Search

About

Products

Connect