DreamFactory

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

DreamFactory records in CISA KEV

No DreamFactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dreamfactory Core 1 record LOW

Records

1 record in Dreamfactory Core · all components

TI-2025-35210 CVE-2025-55988 · GHSA-gv7f-w92j-383q

An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3…

LOW 35

An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00919 Published 2026-03-20 Fixed in 1.0.4 CWE-22

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0