CVE-2023-43856

HighCVSS 7.5/10Last modified Jul 9, 2026

Description

Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-552

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2023
Last modified
Jul 9, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-438575.4Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /admin/u/toIndex.CVE-2023-43868.1The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization CVE-2023-438607.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function.CVE-2023-438617.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function.CVE-2023-438627.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function.CVE-2023-438637.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function.CVE-2023-438647.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function.CVE-2023-438657.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function.CVE-2023-438667.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function.CVE-2023-438677.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function.CVE-2023-438687.5D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function.CVE-2023-438699.8D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard56 function.
CVE-2023-43856: High severity, CVSS 7.5 | Vulnix