dotcms Dotcms Core Vulnerabilities

Dotcms Dotcms Core vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

26 July 2024

Malicious Administrator Could Use Session IDs to Bypass Attribution
CVE-2024-4447
DotcmsDotcms Core4.9MEDIUM

25 July 2024

HTML Injection Vulnerability in Reset Password Login Page
CVE-2024-3938
DotcmsDotcms Core6.1MEDIUM

1 April 2024

Insecure Access Control: Users with Site Admin Role Can Access System Maintenance Tools
CVE-2024-3164
DotcmsDotcms Core4.5MEDIUM
Database Credential Exposure in the Logs
CVE-2024-3165
DotcmsDotcms Core4.5MEDIUM

17 October 2023

CNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd8
CVE-2023-3042
DotcmsDotcms Core5.3MEDIUM