Approved changes feed: RSS · Atom
cpe:2.3:a:html-js:doracms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Html Js (090bf621-dc77-5349-ad71-a7ec5e04cc6e) |
|---|---|
| Product | Doracms (423d40ab-c99a-549d-918d-47ef730f842b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/doramart/doracms |
purl2cpe | 2026-06-01 10:18:07.581563 |
pkg:github/doramart/doracms |
purl2cpe | 2026-06-01 10:18:07.581565 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25870 |
vulnerable | 2026-06-08 07:53:20.555771 |
DoraCMS <= 3.1 UEditor Remote Image Fetch SSRF
MEDIUM (5.8)
DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fetch functionality. The application accepts user-supplied URLs and performs server-side HTTP or HTTPS requests without sufficient validation or destination restrictions. The implementation does not enforce allowlists, block internal or private IP address ranges, or apply request timeouts or response size limits. An attacker can abuse this behavior to induce the server to issue outbound requests to arbitrary hosts, including internal network resources, potentially enabling internal network scanning and denial of service through resource exhaustion.
Published: 2026-02-10T22:16:28.212Z
Updated: 2026-07-14T15:53:56.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28715 |
vulnerable | 2026-06-08 06:33:27.134763 |
Details available
Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint.
Published: 2024-03-19T00:00:00.000Z
Updated: 2024-11-01T14:34:06.073Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35147 |
vulnerable | 2026-06-08 05:46:04.197985 |
Details available
DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request.
Published: 2022-08-17T20:49:28.000Z
Updated: 2024-08-03T09:29:17.421Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18220 |
vulnerable | 2026-06-08 05:20:56.910283 |
Details available
Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks.
Published: 2021-05-20T19:55:48.000Z
Updated: 2024-08-04T14:00:49.118Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.