Mass Assignment Vulnerability in DoraCMS API Key Update Endpoint
A mass assignment vulnerability in DoraCMS through version 3.1.0 allows authenticated low-privileged users to rebind their API key to another user's account, potentially leading to unauthorized profile modifications and content publication or deletion. The vulnerability has a CVSS score of 8.1 and is classified as HIGH severity. Affected users should update DoraCMS to a version beyond 3.1.0.