DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request.

Published Aug 17, 2022 · Updated Aug 3, 2024 · Assigned by mitre