Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.Referenceshttps://gitee.com/isoftforce/dreamer_cms/issues/I6GCUNhttps://github.com/iteachyou-wjn/dreamer_cms/issues/9
