Dreamer Cms Vulnerabilidad

Cronología

Versión

4.1.3	26
4.1.0	3
4.1.1	3
4.1.2	3
4.0	2

Contramedidas

Official Fix	3
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	29

Explotabilidad

High	0
Functional	0
Proof-of-Concept	5
Unproven	0
Not Defined	27

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	4
Network	28

Autenticación

Not Defined	0
High	0
Low	14
None	18

La interacción del usuario

Not Defined	0
Required	21
None	11

C3BM Index

El año pasado

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	5
≤6	2
≤7	20
≤8	3
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	5
≤6	4
≤7	19
≤8	2
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	7
≤5	19
≤6	1
≤7	5
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	3
≤7	0
≤8	2
≤9	17
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	0
≤7	3
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	3
<2k	29
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	21
<2k	11
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (9): 3.0.1, 4, 4.0, 4.0.01, 4.0.1, 4.1, 4.1.1, 4.1.2, 4.1.3

Tipo de software: Content Management System

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-04-04	6.3	6.0	Dreamer CMS ThemesController.java ZipUtils.unZipFiles directory traversal	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.03	CVE-2024-3311
2024-03-30	6.3	6.0	Dreamer CMS Attachment escalada de privilegios	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	CVE-2024-3118
2024-03-09	4.3	4.1	Dreamer CMS toEdit cross site request forgery	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.06	CVE-2024-2354
2024-02-29	3.5	3.4	Dreamer CMS Backup File divulgación de información	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2024-25811
2023-12-24	7.1	6.9	Dreamer CMS uploadFile escalada de privilegios	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.06	CVE-2023-7091
2023-12-15	6.5	6.5	Dreamer CMS backup cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-50017
2023-12-08	4.4	4.4	Dreamer CMS Article Management Department cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-49484
2023-11-30	6.5	6.5	Dreamer CMS add cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-48914
2023-11-30	6.5	6.5	Dreamer CMS delete cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-48913
2023-11-30	6.5	6.5	Dreamer CMS edit cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-48912

22 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

más entradas por Dreamer

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!