Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
doramart/doracms
3.1 @ 7ff4e5c
5
Fixes
10
CVEs
CRITICAL
Peak severity
60.0%
Coverage
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
server/app/controller/api/content.js: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Remote Code Execution: The use of shell.exec in plugin management allowed arbitrary shell command execution and path traversal during file uploads, presenting a direct vector for remote system compromise.
Broken Access Control: Arbitrary file uploads were accessible without proper authorization middleware, allowing unauthenticated attackers to upload files prior to routes being correctly prefixed and protected.
Auth Bypass: API route matching logic in the admin authorization middleware validated only the request path string without verifying the associated HTTP verb, enabling privilege escalation.