First published: Mon Nov 13 2023(Updated: )
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
=4.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-48058 is high with a score of 8.8.
CVE-2023-48058 is a Cross-Site Request Forgery (CSRF) vulnerability.
CVE-2023-48058 affects Dreamer CMS version 4.1.3.
To fix CVE-2023-48058, it is recommended to update Dreamer CMS to a version that is not affected.
You can find more information about CVE-2023-48058 at the following reference: [link](https://github.com/CP1379767017/cms/blob/main/CSRF%20exists%20at%20the%20task%20management%20execution%20task%20location.md)