CVE-2023-48914

Summary

CVE-2023-48914 is a newly discovered vulnerability affecting Dreamer CMS version 4.1.3. The issue involves a Cross-Site Request Forgery (CSRF) weakness in the /admin/archives/add component. An attacker can exploit this vulnerability by crafting a malicious request, potentially leading to unauthorized actions being carried out on behalf of the victim within the administration interface. Successful exploitation could result in data modification or even system compromise. Users are strongly encouraged to update to a patched version of Dreamer CMS as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.