CVE-2023-45902 - Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete

HIGH

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete

Published Oct 17, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.32%

Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20csrf%20in%20the%20attachment%20management%20deletion%20function.md		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 17, 2023

Updated Sep 13, 2024

Reserved Oct 16, 2023

Updated Sep 13, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a