Security Advisory
CVE-2020-18220
7.5
HIGH
Vulnerability Description
Weak Encoding for Password in DoraCMS v2.1.1 and earlier allows attackers to obtain sensitive information as it does not use a random salt or IV for its AES-CBC encryption, causes password encrypted for users to be susceptible to dictionary attacks.
Published Date
May 20, 2021
Official Source
NIST NVD Advisory