CVE-2023-48063

An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

0.25% chance of exploitation in the next 30 days, 16th percentile

Published

2023-11-13

Updated

2024-09-03

Proof-of-concept exploits (1)

• CP1379767017/cms/blob/dreamcms_vul/There%20is%20a%20CSRF%20vulnerability%20at%20th%20menu…

References

• CVE Record
• NVD entry

Related

• CVE-2023-48058
• CVE-2023-48060
• CVE-2023-48078
• CVE-2023-4808
• CVE-2023-4805
• CVE-2023-48084