TI-2025-12521 CVE-2025-13700 · GHSA-vjrq-m6qm-rjgr
OS command injection in DreamFactory
Priority LOW 37
DreamFactory saveZipFile Command Injection Remote Code Execution Vulnerability.
DreamFactory
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
DreamFactory records in CISA KEVNo DreamFactory vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2025-35210 CVE-2025-55988 · GHSA-gv7f-w92j-383q
An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3…
Priority LOW 35
An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.