CVE-2023-45902

Description

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.

PUBLISHED Reserved 2023-10-16 | Published 2023-10-17 | Updated 2024-09-13 | Assigner mitre

References

github.com/...the attachment management deletion function.md

github.com/...the attachment management deletion function.md

cve.org (CVE-2023-45902)

nvd.nist.gov (CVE-2023-45902)

Download JSON