CVE-2023-27084

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-270877.5Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageL CVE-2023-270888.8feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform CVE-2023-270898.2Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payload in the login par CVE-2023-27094.8The AN_GradeBook WordPress plugin through 5.0.1 does not sanitise and escape some of its settings, which could allow high privilege users su CVE-2023-270905.4Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title pa CVE-2023-270917.2An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s).CVE-2023-270926.1Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter.CVE-2023-270936.1Cross Site Scripting vulnerability found in My-Blog allows attackers to cause a denial of service via the Post function.CVE-2023-270948.8An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the tenant Management mo CVE-2023-270956.5Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the Us CVE-2023-270966.5Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyCo CVE-2023-270987.5TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.