CVE-2023-7091

Summary

CVE-2023-7091 is a newly disclosed vulnerability affecting Dreamer CMS version 4.1.3. This issue, identified as VDB-248938, allows for unrestricted file uploads through manipulation of the file argument in the /upload/uploadFile. The vulnerability can be exploited remotely, putting systems using this version of Dreamer CMS at risk. The exploit has been made public, increasing the potential for malicious actors to utilize it. Despite early notification, the vendor has yet to respond.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.