Description
Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive files to be read.
References (1)
Core 1
Core References
Exploit, Issue Tracking
https://gitee.com/iteachyou/dreamer_cms/issues/I6NOFN
Scores
CVSS v3
9.1
EPSS
0.0059
EPSS Percentile
69.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-22
Status
published
Products (1)
iteachyou/dreamer_cms
< 4.0.1
Published
Nov 29, 2023
Tracked Since
Feb 18, 2026