CVE-2025-1543

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Feb 21, 2025
CWE ID 22

Summary

CVE-2025-1543 is a newly disclosed vulnerability affecting the iteachyou Dreamer CMS version 4.1.3. The issue lies in the processing of the file /resource/js/ueditor-1.4.3.3 and allows for path traversal, potentially enabling remote attackers to manipulate the system. Although the vendor was notified about this disclosure, they have yet to provide a response or issue a patch. This vulnerability poses a significant risk and has already been made public.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share