Advisories · Technology
doramart DoraCMS.
Every CVE that names doramart DoraCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint
- doramart DoraCMS
- Broken access control
- CVSS 5.3 Medium
doramart DoraCMS v1.js createFileBypath path traversal
- doramart DoraCMS
- Path traversal
- CVSS 6.9 Medium
doramart DoraCMS Email API send improper authentication
- doramart DoraCMS
- Authentication bypass
- CVSS 6.9 Medium
DoraCMS <= 3.1 UEditor Remote Image Fetch SSRF
- doramart DoraCMS
- Server-side request forgery (SSRF)