CVE-2025-1543
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Feb 21, 2025
CWE ID 22
Summary
CVE-2025-1543 is a newly disclosed vulnerability affecting the iteachyou Dreamer CMS version 4.1.3. The issue lies in the processing of the file /resource/js/ueditor-1.4.3.3 and allows for path traversal, potentially enabling remote attackers to manipulate the system. Although the vendor was notified about this disclosure, they have yet to provide a response or issue a patch. This vulnerability poses a significant risk and has already been made public.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share