Dot CMS Permissions Privileges and Access Controls Vulnerability - CVE-2016-8600 - Vulnerability Database

Dot CMS Permissions Privileges and Access Controls Vulnerability - CVE-2016-8600

High

Reference: CVE-2016-8600

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-8600

Title: Dot CMS Permissions Privileges and Access Controls Vulnerability

Overview:

In dotCMS 3.2.1 attacker can load captcha once fill it with correct value and then this correct value is ok for forms with captcha check later.