Interinfo DreamMaker Arbitrary File Read Vulnerability

Vulnerability

A vulnerability allowing arbitrary file read has been identified in Interinfo DreamMaker versions through 2.2. This issue arises from relative path traversal, which can be exploited by unauthenticated local attackers to download arbitrary system files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system files, potentially allowing for further attacks or exploitation of the system.

Remediation

Users are advised to update to DreamMaker version 2.3 or later.

Added: May 29, 2026, 2:38 PM
Updated: May 29, 2026, 2:38 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.8
exploitability
4.7
remediation
0.0
relevance
9.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.