critical9.8
CVE-2023-49443
DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords.
Impact
DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Html-Js | Doracms | Version 2.1.8 |