CVE-2016-8600 in dotCMS

सारांश

द्वारा MITRE

In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• आरक्षित करना: 11/10/2016
• प्रकटीकरण: 28/10/2016
• संयम: स्वीकृत
• प्रविष्टि: VDB-93001
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• CVSS: 7.5 (NVD)
• EPSS: 0.01750
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Lawfirm, Agriculture, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8600
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8600
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8600/