CVE-2024-3311
Dreamer CMS ThemesController.java ZipUtils.unZipFiles path traversal
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
4Exploited in Wild
-Decision
Descriptions
A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability is the function ZipUtils.unZipFiles of the file controller/admin/ThemesController.java. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.3.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-259369 was assigned to this vulnerability.
Se encontró una vulnerabilidad en Dreamer CMS hasta 4.1.3.0. Ha sido declarada crítica. La función ZipUtils.unZipFiles del archivo controlador/admin/ThemesController.java es afectada por esta vulnerabilidad. La manipulación conduce al path traversal. El ataque se puede lanzar de forma remota. El exploit ha sido divulgado al público y puede utilizarse. La actualización a la versión 4.1.3.1 puede solucionar este problema. Se recomienda actualizar el componente afectado. A esta vulnerabilidad se le asignó el identificador VDB-259369.
In Dreamer CMS bis 4.1.3.0 wurde eine kritische Schwachstelle ausgemacht. Hierbei betrifft es die Funktion ZipUtils.unZipFiles der Datei controller/admin/ThemesController.java. Dank der Manipulation mit unbekannten Daten kann eine path traversal-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 4.1.3.1 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2024-04-04 CVE Reserved
- 2024-04-04 CVE Published
- 2024-04-05 EPSS Updated
- 2024-06-24 First Exploit
- 2024-08-01 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| https://vuldb.com/?id.259369 | Technical Description | |
| https://vuldb.com/?submit.303874 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://github.com/FaLLenSKiLL1/CVE-2024-33113 | 2024-06-24 | |
| https://github.com/FaLLenSKiLL1/CVE-2024-33111 | 2024-06-25 | |
| https://github.com/tekua/CVE-2024-33113 | 2024-06-25 | |
| https://gitee.com/y1336247431/poc-public/issues/I9BA5R | 2024-08-01 |
| URL | Date | SRC |
|---|---|---|
| https://gitee.com/iteachyou/dreamer_cms/releases/tag/Latest_Stable_Release_4.1.3.1 | 2024-06-04 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dreamer Search vendor "Dreamer" | CMS Search vendor "Dreamer" for product "CMS" | 4.1.0 Search vendor "Dreamer" for product "CMS" and version "4.1.0" | en |
Affected
| ||||||
| Dreamer Search vendor "Dreamer" | CMS Search vendor "Dreamer" for product "CMS" | 4.1.1 Search vendor "Dreamer" for product "CMS" and version "4.1.1" | en |
Affected
| ||||||
| Dreamer Search vendor "Dreamer" | CMS Search vendor "Dreamer" for product "CMS" | 4.1.2 Search vendor "Dreamer" for product "CMS" and version "4.1.2" | en |
Affected
| ||||||
| Dreamer Search vendor "Dreamer" | CMS Search vendor "Dreamer" for product "CMS" | 4.1.3 Search vendor "Dreamer" for product "CMS" and version "4.1.3" | en |
Affected
| ||||||