CVE-2023-49444

2023-12-0800:00:00

mitre

www.cve.org

arbitrary file upload

doracms v2.1.8

code execution

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

18.2%

JSON

An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar.

References

github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability