← All advisories

Critical severity9.8NVD Advisory· Published Aug 17, 2022· Updated Jun 17, 2026

CVE-2022-35147

CVE-2022-35147

Description

DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request.

Affected products

3

DoraCMS/DoraCMSllm-fuzzy2 versions
<=2.18+ 1 more
- (no CPE)range: <=2.18
- (no CPE)
Doramart/Doracms
cpe:2.3:a:html-js:doracms:*:*:*:*:*:*:*:*
Range: <=2.1.8

Patches

Vulnerability mechanics

References

1

github.com/doramart/DoraCMS/issues/256nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.