Vulnerabilities > CVE-2023-49443 - Improper Restriction of Excessive Authentication Attempts vulnerability in Html-Js Doracms 2.1.8
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |