CVSS 3.1 Score 8.8 of 10 (high)


Published Oct 17, 2023
Updated: Oct 18, 2023
CWE ID 352


CVE-2023-45904 is a vulnerability found in Dreamer CMS v4.1.3, which allows for Cross-Site Request Forgery (CSRF) through the component /variable/update. This vulnerability has a high severity rating and poses a potential danger to organizations using the affected product. The base score for this vulnerability is 8.8 out of 10, indicating a significant risk. Remediating this vulnerability requires user interaction, and organizations should implement measures to prevent CSRF attacks to protect the integrity and confidentiality of their systems and data.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-45904 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options