CVE-2016-8600

In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later

published October 28, 2016

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01750 · 77.5th percentile
Published
2016-10-28T15:00Z
EPSS history
Timeline
  • 28 OCT 15:00Z
    In dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct value is ok for forms with captcha check later
    cvelistv5