CVE-2023-49443

CVE-2023-49443 is a critical vulnerability affecting DoraCMS v2.1.8, stemming from the re-use of verification code for both valid usernames and passwords. This flaw enables unauthenticated attackers to conduct brute-force attacks to gain full access to the application. With a CVSS score of 9.8 (CRITICAL) and a FAUCET Risk Score of 92/100, it poses a significant threat due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered notable community discussion with 10 mentions, indicating awareness among security researchers.