Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-3187

The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery. The dotCMS administrator panel contains a cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. An unauthenticated remote attacker may perform actions with the dotCMS administrator panel with the same permissions of a victim user or execute arbitrary system commands with the permissions of the user running the dotCMS application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.8%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
Products affected by CVE-2017-3187
  • Dotcms » Dotcms » Version: 1.9
    cpe:2.3:a:dotcms:dotcms:1.9
  • Dotcms » Dotcms » Version: 1.9.2.1
    cpe:2.3:a:dotcms:dotcms:1.9.2.1
  • Dotcms » Dotcms » Version: 1.9.5.1
    cpe:2.3:a:dotcms:dotcms:1.9.5.1
  • Dotcms » Dotcms » Version: 2.0
    cpe:2.3:a:dotcms:dotcms:2.0
  • Dotcms » Dotcms » Version: 2.0.1
    cpe:2.3:a:dotcms:dotcms:2.0.1
  • Dotcms » Dotcms » Version: 2.1
    cpe:2.3:a:dotcms:dotcms:2.1
  • Dotcms » Dotcms » Version: 2.1.1
    cpe:2.3:a:dotcms:dotcms:2.1.1
  • Dotcms » Dotcms » Version: 2.2
    cpe:2.3:a:dotcms:dotcms:2.2
  • Dotcms » Dotcms » Version: 2.2.1
    cpe:2.3:a:dotcms:dotcms:2.2.1
  • Dotcms » Dotcms » Version: 2.3
    cpe:2.3:a:dotcms:dotcms:2.3
  • Dotcms » Dotcms » Version: 2.3.1
    cpe:2.3:a:dotcms:dotcms:2.3.1
  • Dotcms » Dotcms » Version: 2.3.2
    cpe:2.3:a:dotcms:dotcms:2.3.2
  • Dotcms » Dotcms » Version: 2.5
    cpe:2.3:a:dotcms:dotcms:2.5
  • Dotcms » Dotcms » Version: 2.5.1
    cpe:2.3:a:dotcms:dotcms:2.5.1
  • Dotcms » Dotcms » Version: 2.5.2
    cpe:2.3:a:dotcms:dotcms:2.5.2
  • Dotcms » Dotcms » Version: 2.5.3
    cpe:2.3:a:dotcms:dotcms:2.5.3
  • Dotcms » Dotcms » Version: 2.5.4
    cpe:2.3:a:dotcms:dotcms:2.5.4
  • Dotcms » Dotcms » Version: 3.0
    cpe:2.3:a:dotcms:dotcms:3.0
  • Dotcms » Dotcms » Version: 3.0.1
    cpe:2.3:a:dotcms:dotcms:3.0.1
  • Dotcms » Dotcms » Version: 3.1
    cpe:2.3:a:dotcms:dotcms:3.1
  • Dotcms » Dotcms » Version: 3.2
    cpe:2.3:a:dotcms:dotcms:3.2
  • Dotcms » Dotcms » Version: 3.2.1
    cpe:2.3:a:dotcms:dotcms:3.2.1
  • Dotcms » Dotcms » Version: 3.2.2
    cpe:2.3:a:dotcms:dotcms:3.2.2
  • Dotcms » Dotcms » Version: 3.2.3
    cpe:2.3:a:dotcms:dotcms:3.2.3
  • Dotcms » Dotcms » Version: 3.2.4
    cpe:2.3:a:dotcms:dotcms:3.2.4
  • Dotcms » Dotcms » Version: 3.3
    cpe:2.3:a:dotcms:dotcms:3.3
  • Dotcms » Dotcms » Version: 3.3.1
    cpe:2.3:a:dotcms:dotcms:3.3.1
  • Dotcms » Dotcms » Version: 3.3.2
    cpe:2.3:a:dotcms:dotcms:3.3.2
  • Dotcms » Dotcms » Version: 3.5
    cpe:2.3:a:dotcms:dotcms:3.5
  • Dotcms » Dotcms » Version: 3.5.1
    cpe:2.3:a:dotcms:dotcms:3.5.1
  • Dotcms » Dotcms » Version: 3.6.0
    cpe:2.3:a:dotcms:dotcms:3.6.0
  • Dotcms » Dotcms » Version: 3.6.1
    cpe:2.3:a:dotcms:dotcms:3.6.1
  • Dotcms » Dotcms » Version: 3.6.2
    cpe:2.3:a:dotcms:dotcms:3.6.2
  • Dotcms » Dotcms » Version: 3.7.0
    cpe:2.3:a:dotcms:dotcms:3.7.0
  • Dotcms » Dotcms » Version: 3.7.1
    cpe:2.3:a:dotcms:dotcms:3.7.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved