CVE-2023-45903

Summary

CVE-2023-45903 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Dreamer CMS version 4.1.3. An attacker can exploit this issue by crafting a malicious request to force an administrator to perform unintended actions within the application, such as deleting labels, without their consent. This can lead to data loss or unauthorized modification of the CMS configuration. The vulnerability is located in the /admin/label/delete component and requires user interaction to be successfully exploited. It is recommended that users update to the latest version of Dreamer CMS to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.