woshinibaba222/DoraCMS-Verification-Code-Reuse

woshinibaba222/DoraCMS-Verification-Code-Reuse

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-49443↗
9.8 CRITICAL—

DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.