Vulnetix
Try Vulnetix Request Demo
CVE-2025-3977 PUBLISHED CVSS 5.300000190734863 MEDIUM

A vulnerability was found in iteachyou Dreamer CMS up to 4.1.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/attachment/download of the component Attachment Handler. The manipulation of the argument ID leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS 0.14% · 33.5th percentile

Risk Scores

CVSS v4.0
5.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.14%
33.5th percentile

Affected Products

VendorProductVersions
iteachyouDreamer CMS4.1.0, 4.1.1, 4.1.2
iteachyoudreamer_cms0

Timeline

References

Open in Interactive Console →