CVE-2022-35147

DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-08-17

Last modified

2024-08-03

Weaknesses

CWE-200

Affected products

• Doracms (Html-js)

References

• https://github.com/doramart/DoraCMS/issues/256