CMS

Dot CMS

dotCMS is an open source headless/hybrid content management system (CMS) that has been designed to manage and deliver personalized permission-based content experiences across multiple channels. dotCMS can can serve as a headless content hub and also as a platform for sites mobile apps mini-sites portals intranets. dotCMS is used everywhere from running small sites to powering multi-node installations for governments Fortune 100 companies Universities and Global Brands. Written in java dotCMS environment can scale to support hundreds of editors managing thousands of sites with millions of content objects.

Official Site:

https://www.dotcms.com/

Severity Summary:

Critical: 6 High: 18 Medium: 29 Low: 1

Reference

Title

Severity

CVE-2023-3042

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-6003

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-15219

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2018-16980

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-45783

Dot CMS Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Medium

CVE-2022-37034

Dot CMS Uncontrolled Recursion Vulnerability

Medium

CVE-2022-37431

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-37033

Dot CMS Server-Side Request Forgery (SSRF) Vulnerability

Medium

CVE-2022-35740

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-35358

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-35360

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-35361

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2020-17542

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2020-35274

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-3188

Dot CMS Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Medium

CVE-2019-12309

Dot CMS Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Medium

CVE-2019-11846

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-5877

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-5876

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-5875

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2018-19554

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2018-17422

Dot CMS URL Redirection to Untrusted Site (Open Redirect) Vulnerability

Medium

CVE-2024-3938

Dot CMS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2016-3972

Dot CMS Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Low