CVE-2016-8600

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-8600

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8600.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-8600

Published

2016-10-28T15:59:12.767Z

Modified

2026-07-08T12:27:41.501020Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later.

References

Affected packages

Git / github.com/dotcms/core

Affected ranges

Type

GIT

Repo

https://github.com/dotcms/core

Events

Introduced

adcea97edd49ba1623716404e1d95ff6ce57b75e

Last affected

adcea97edd49ba1623716404e1d95ff6ce57b75e

Database specific

{
    "cpe": "cpe:2.3:a:dotcms:dotcms:3.2.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.2.1"
        },
        {
            "last_affected": "3.2.1"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

3.*

3.2

3.2.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8600.json"