← All advisories

Critical severity9.8NVD Advisory· Published Aug 17, 2022· Updated Jun 17, 2026

CVE-2022-35147

CVE-2022-35147

Description

DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request.

Affected products

3

Doramart/Doracms
cpe:2.3:a:html-js:doracms:*:*:*:*:*:*:*:*
Range: <=2.1.8
DoraCMS/DoraCMSdescription
DoraCMS/DoraCMSllm-fuzzy
Range: <=2.18

Patches

Vulnerability mechanics

References

1

github.com/doramart/DoraCMS/issues/256nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.