CVE-2023-45902

Summary

CVE-2023-45902 represents a newly identified vulnerability in Dreamer CMS version 4.1.3. This issue permits an attacker to execute a Cross-Site Request Forgery (CSRF) attack through the /admin/attachment/delete component. The CSRF vulnerability can lead to unintended actions being performed on the affected system by deceiving the user into clicking a malicious link. This can potentially result in data manipulation or unauthorized access to functionalities within the CMS. System administrators are advised to upgrade to a patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.