CVE-2023-27084 Information disclosure in n/a

What is CVE-2023-27084?

CVE-2023-27084 is a medium-severity vulnerability in n/a, published on 16 Mar 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.

Weakness: CWE-732

Which versions are affected by CVE-2023-27084?

It affects 1 product.

Products include Iteachyou Dreamer Cms.

How do I fix CVE-2023-27084?

No fix has been published for CVE-2023-27084 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-27084 being exploited?

There is no known exploitation of CVE-2023-27084 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-42279 SQL injection in n/a Critical 9.8
• CVE-2021-43084 SQL injection in n/a Critical 9.8
• CVE-2023-46886 Path traversal in n/a Critical 9.1
• CVE-2023-50017 Cross-site request forgery in n/a High 8.8
• CVE-2023-48912 Cross-site request forgery in n/a High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jx9v-jv5r-x5ff.