CVE-2026-3795 - Vulnerability Analysis
MediumCVSS: 6.3Last Updated: March 10, 2026
doramart DoraCMS - Path Traversal
Published: March 9, 2026Updated: March 10, 2026PoC AvailableRemote Exploitable
Overview
doramart DoraCMS 3.0.x contains a path traversal caused by manipulation in createFileBypath function in /DoraCMS/server/app/router/api/v1.js, letting remote attackers access arbitrary files, exploit requires no special privileges.
Severity & Score
Severity: Medium
CVSS Score: 6.3
Impact
Remote attackers can access arbitrary files, potentially exposing sensitive information or system files.
Mitigation
Update to the latest version of doramart DoraCMS.
References
Related Resources
Details
- CVE ID
- CVE-2026-3795
- Severity
- Medium
- CVSS Score
- 6.3
- Type
- path_traversal
- Status
- confirmed
CWE
- CWE-22
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L