Vulnerabilities > Dreamer CMS Project > Dreamer CMS > 4.0.1

DATE CVE VULNERABILITY TITLE RISK
2023-09-03 CVE-2023-4743 Files or Directories Accessible to External Parties vulnerability in Dreamer CMS Project Dreamer CMS
A vulnerability was found in Dreamer CMS up to 4.1.3.
network
high complexity
dreamer-cms-project CWE-552
4.8
2023-05-02 CVE-2023-2473 Algorithmic Complexity vulnerability in Dreamer CMS Project Dreamer CMS
A vulnerability was found in Dreamer CMS up to 4.1.3.
network
low complexity
dreamer-cms-project CWE-407
7.5
2023-03-16 CVE-2023-27084 Incorrect Permission Assignment for Critical Resource vulnerability in Dreamer CMS Project Dreamer CMS 4.0.1
Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.
local
high complexity
dreamer-cms-project CWE-732
5.3