CVE-2023-2473

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-2473
A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects the function updatePwd of the file UserController.java of the component Password Hash Calculation. The manipulation leads to inefficient algorithmic complexity. The attack can be initiated remotely. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227860.

4.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://gitee.com/isoftforce/dreamer_cms/issues/I6WHO7 Issue Tracking
https://gitee.com/isoftforce/dreamer_cms/issues/I6WHO7 Issue Tracking
https://vuldb.com/?ctiid.227860 Permissions Required VDB Entry
https://vuldb.com/?ctiid.227860 Permissions Required VDB Entry
https://vuldb.com/?id.227860 VDB Entry
https://vuldb.com/?id.227860 VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:iteachyou:dreamer_cms:*:*:*:*:*:*:*:*
History

04 Apr 2025, 15:16

Type Values Removed Values Added
CPE cpe:2.3:a:dreamer_cms_project:dreamer_cms:*:*:*:*:*:*:*:* cpe:2.3:a:iteachyou:dreamer_cms:*:*:*:*:*:*:*:*
First Time Iteachyou
Iteachyou dreamer Cms

30 Jan 2025, 15:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 4.3
References (MISC) https://vuldb.com/?id.227860 - VDB Entry () https://vuldb.com/?id.227860 - VDB Entry
References (MISC) https://vuldb.com/?ctiid.227860 - Permissions Required, VDB Entry () https://vuldb.com/?ctiid.227860 - Permissions Required, VDB Entry
References (MISC) https://gitee.com/isoftforce/dreamer_cms/issues/I6WHO7 - Issue Tracking () https://gitee.com/isoftforce/dreamer_cms/issues/I6WHO7 - Issue Tracking

09 May 2023, 17:36

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CPE cpe:2.3:a:dreamer_cms_project:dreamer_cms:*:*:*:*:*:*:*:*
First Time Dreamer Cms Project
Dreamer Cms Project dreamer Cms
References (MISC) https://gitee.com/isoftforce/dreamer_cms/issues/I6WHO7 - (MISC) https://gitee.com/isoftforce/dreamer_cms/issues/I6WHO7 - Issue Tracking
References (MISC) https://vuldb.com/?id.227860 - (MISC) https://vuldb.com/?id.227860 - VDB Entry
References (MISC) https://vuldb.com/?ctiid.227860 - (MISC) https://vuldb.com/?ctiid.227860 - Permissions Required, VDB Entry

02 May 2023, 13:29

Type Values Removed Values Added
New CVE
Information

Published : 2023-05-02 13:15

Updated : 2025-04-04 15:16

NVD link : CVE-2023-2473

Mitre link : CVE-2023-2473

JSON object : View

Products Affected

iteachyou

  • dreamer_cms
CWE
CWE-407

Inefficient Algorithmic Complexity