CVE-2023-45902
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2023-10-17
- Last modified
- 2024-09-13
- Weaknesses
- CWE-352
Affected products
References
- https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20in%20the%20attachment%20management%20delet…
