CVE-2023-2473CWE-407

Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity

Medium · published May 2, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects the function updatePwd of the file UserController.java of the component Password Hash Calculation. The manipulation leads to inefficient algorithmic complexity. The attack can be initiated remotely. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227860.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00929 · 60.2th percentile
Weakness
CWE-407 · Inefficient Algorithmic Complexity
Published
2023-05-02T12:00Z
EPSS history
Timeline
  • 02 MAY 12:00Z
    Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity
    cvelistv5