GCVE - cpe:2.3:a:dreamer_cms_project:dreamer

Approved changes feed: RSS · Atom

cpe:2.3:a:dreamer_cms_project:dreamer_cms:4.0.1:*:*:*:*:*:*:*

part: a version: 4.0.1 update: *

Vendor	Dreamer Cms Project (`aa37dd4c-50ca-588a-9020-550831b57ad8`)
Product	Dreamer Cms (`b00a7aa4-efff-5701-a47e-283c6466d74d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/cat-github/dreamer_cms`	purl2cpe	2026-06-01 10:16:50.654336
`pkg:github/miazzy/dreamer_cms`	purl2cpe	2026-06-01 10:16:50.654337
`pkg:github/xinhudong/dreamer_cms`	purl2cpe	2026-06-01 10:16:50.654339

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-25811`	vulnerable	2026-06-08 06:31:23.867716	Details available An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information. Published: 2024-02-29T00:00:00.000Z Updated: 2024-08-04T11:34:06.580Z Open on db.gcve.eu Reference links https://github.com/Fei123-design/vuln/blob/master/Dreamer%20CMS%20Unauthorized%20access%20vulnerability.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27084`	vulnerable	2026-06-08 05:57:40.616395	Details available Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter. Published: 2023-03-16T00:00:00.000Z Updated: 2025-02-26T19:39:33.555Z Open on db.gcve.eu Reference links https://gitee.com/isoftforce/dreamer_cms/issues/I6GCUN https://github.com/iteachyou-wjn/dreamer_cms/issues/9	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.