Threats tagged 'ghsa-x998-w6fg-m92w'

DoraCMS versions through 3.1.0 have a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint. This flaw allows authenticated users with low privileges to reassign their API key to another user's account by modifying the userId field. Exploiting this, an attacker can impersonate the victim to alter profiles and publish or delete content.