CVE-2023-46886

PoC —

CVSS 3.1

9.1 critical

EPSS

<1%p61

Published

Nov 29, 2023 (Nov 29, 2023)

Modified

Jun 17, 2026

Description

Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary modification of the template file, allowing system sensitive files to be read.

Vendors: iteachyou
Products: dreamer cms
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.