CVE-2023-46887

7.5

HIGHCVSS v3

Published

November 29, 2023

Affected

1 project

Assigned by

MITRE

Severity scale

010

Description

In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability.

GitHubDreamer CMS 梦想家内容发布系统采用流行的SpringBoot搭建，支持静态化、标签化建站。不需要专业的后台开发技能，会HTML就能建站，上手超简单；只需使用系统提供的标签就能轻松建设网站。全面支持各类表单字段，真正实现“0”代码建网站。

= *, < 4.0.1NVD