CVE-2016-8600

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-8600
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8600.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-8600
Published
2016-10-28T15:59:12Z
Modified
2026-10-20T10:48:53Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later.

References

Affected packages

Git / github.com/dotcms/core

Affected ranges

Type
GIT
Repo
https://github.com/dotcms/core
Events
Introduced
adcea97edd49ba1623716404e1d95ff6ce57b75e
Last Affected
adcea97edd49ba1623716404e1d95ff6ce57b75e
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:dotcms:dotcms:3.2.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "3.2.1"
                },
                {
                    "last_affected":  "3.2.1"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

3.*
3.2
3.2.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8600.json"