CVE-2023-49444

2023-12-0800:00:00

mitre

www.cve.org

arbitrary file upload

doracms v2.1.8

code execution

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar.

References

github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability