Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-3938

The "reset password" login page accepted an HTML injection via URL parameters. This has already been rectified via patch, and as such it cannot be demonstrated via Demo site link. Those interested to see the vulnerability may spin up a http://localhost:8082/dotAdmin/#/public/login?resetEmailSent=true&resetEmail=%3Ch1%3E%3Ca%20href%3D%22https:%2F%2Fgoogle.com%22%3ECLICK%20ME%3C%2Fa%3E%3C%2Fh1%3E This will result in a view along these lines: * OWASP Top 10 - A03: Injection * CVSS Score: 5.4 * AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator * https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N&... https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.9%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2024-3938
  • Dotcms » Dotcms » Version: 20.10.1
    cpe:2.3:a:dotcms:dotcms:20.10.1
  • Dotcms » Dotcms » Version: 20.10.4
    cpe:2.3:a:dotcms:dotcms:20.10.4
  • Dotcms » Dotcms » Version: 20.11
    cpe:2.3:a:dotcms:dotcms:20.11
  • Dotcms » Dotcms » Version: 20.11.1
    cpe:2.3:a:dotcms:dotcms:20.11.1
  • Dotcms » Dotcms » Version: 21.01
    cpe:2.3:a:dotcms:dotcms:21.01
  • Dotcms » Dotcms » Version: 21.02
    cpe:2.3:a:dotcms:dotcms:21.02
  • Dotcms » Dotcms » Version: 21.02.1
    cpe:2.3:a:dotcms:dotcms:21.02.1
  • Dotcms » Dotcms » Version: 21.02.2
    cpe:2.3:a:dotcms:dotcms:21.02.2
  • Dotcms » Dotcms » Version: 21.03
    cpe:2.3:a:dotcms:dotcms:21.03
  • Dotcms » Dotcms » Version: 21.04
    cpe:2.3:a:dotcms:dotcms:21.04
  • Dotcms » Dotcms » Version: 21.05
    cpe:2.3:a:dotcms:dotcms:21.05
  • Dotcms » Dotcms » Version: 21.05.1
    cpe:2.3:a:dotcms:dotcms:21.05.1
  • Dotcms » Dotcms » Version: 21.06
    cpe:2.3:a:dotcms:dotcms:21.06
  • Dotcms » Dotcms » Version: 21.06.1
    cpe:2.3:a:dotcms:dotcms:21.06.1
  • Dotcms » Dotcms » Version: 21.06.10
    cpe:2.3:a:dotcms:dotcms:21.06.10
  • Dotcms » Dotcms » Version: 21.06.12
    cpe:2.3:a:dotcms:dotcms:21.06.12
  • Dotcms » Dotcms » Version: 21.06.13
    cpe:2.3:a:dotcms:dotcms:21.06.13
  • Dotcms » Dotcms » Version: 21.06.14
    cpe:2.3:a:dotcms:dotcms:21.06.14
  • Dotcms » Dotcms » Version: 21.06.3
    cpe:2.3:a:dotcms:dotcms:21.06.3
  • Dotcms » Dotcms » Version: 21.06.4
    cpe:2.3:a:dotcms:dotcms:21.06.4
  • Dotcms » Dotcms » Version: 21.06.5
    cpe:2.3:a:dotcms:dotcms:21.06.5
  • Dotcms » Dotcms » Version: 21.06.6
    cpe:2.3:a:dotcms:dotcms:21.06.6
  • Dotcms » Dotcms » Version: 21.06.7
    cpe:2.3:a:dotcms:dotcms:21.06.7
  • Dotcms » Dotcms » Version: 21.06.8
    cpe:2.3:a:dotcms:dotcms:21.06.8
  • Dotcms » Dotcms » Version: 21.06.9
    cpe:2.3:a:dotcms:dotcms:21.06.9
  • Dotcms » Dotcms » Version: 21.08
    cpe:2.3:a:dotcms:dotcms:21.08
  • Dotcms » Dotcms » Version: 21.09
    cpe:2.3:a:dotcms:dotcms:21.09
  • Dotcms » Dotcms » Version: 21.10
    cpe:2.3:a:dotcms:dotcms:21.10
  • Dotcms » Dotcms » Version: 21.10.1
    cpe:2.3:a:dotcms:dotcms:21.10.1
  • Dotcms » Dotcms » Version: 21.11
    cpe:2.3:a:dotcms:dotcms:21.11
  • Dotcms » Dotcms » Version: 22.01
    cpe:2.3:a:dotcms:dotcms:22.01
  • Dotcms » Dotcms » Version: 22.02
    cpe:2.3:a:dotcms:dotcms:22.02
  • Dotcms » Dotcms » Version: 22.03
    cpe:2.3:a:dotcms:dotcms:22.03
  • Dotcms » Dotcms » Version: 22.03.1
    cpe:2.3:a:dotcms:dotcms:22.03.1
  • Dotcms » Dotcms » Version: 22.03.10
    cpe:2.3:a:dotcms:dotcms:22.03.10
  • Dotcms » Dotcms » Version: 22.03.11
    cpe:2.3:a:dotcms:dotcms:22.03.11
  • Dotcms » Dotcms » Version: 22.03.12
    cpe:2.3:a:dotcms:dotcms:22.03.12
  • Dotcms » Dotcms » Version: 22.03.13
    cpe:2.3:a:dotcms:dotcms:22.03.13
  • Dotcms » Dotcms » Version: 22.03.14
    cpe:2.3:a:dotcms:dotcms:22.03.14
  • Dotcms » Dotcms » Version: 22.03.15
    cpe:2.3:a:dotcms:dotcms:22.03.15
  • Dotcms » Dotcms » Version: 22.03.2
    cpe:2.3:a:dotcms:dotcms:22.03.2
  • Dotcms » Dotcms » Version: 22.03.4
    cpe:2.3:a:dotcms:dotcms:22.03.4
  • Dotcms » Dotcms » Version: 22.03.5
    cpe:2.3:a:dotcms:dotcms:22.03.5
  • Dotcms » Dotcms » Version: 22.03.6
    cpe:2.3:a:dotcms:dotcms:22.03.6
  • Dotcms » Dotcms » Version: 22.03.7
    cpe:2.3:a:dotcms:dotcms:22.03.7
  • Dotcms » Dotcms » Version: 22.03.8
    cpe:2.3:a:dotcms:dotcms:22.03.8
  • Dotcms » Dotcms » Version: 22.03.9
    cpe:2.3:a:dotcms:dotcms:22.03.9
  • Dotcms » Dotcms » Version: 22.05
    cpe:2.3:a:dotcms:dotcms:22.05
  • Dotcms » Dotcms » Version: 22.06
    cpe:2.3:a:dotcms:dotcms:22.06
  • Dotcms » Dotcms » Version: 22.08
    cpe:2.3:a:dotcms:dotcms:22.08
  • Dotcms » Dotcms » Version: 22.09
    cpe:2.3:a:dotcms:dotcms:22.09
  • Dotcms » Dotcms » Version: 22.10
    cpe:2.3:a:dotcms:dotcms:22.10
  • Dotcms » Dotcms » Version: 22.10.1
    cpe:2.3:a:dotcms:dotcms:22.10.1
  • Dotcms » Dotcms » Version: 23.01
    cpe:2.3:a:dotcms:dotcms:23.01
  • Dotcms » Dotcms » Version: 23.01.1
    cpe:2.3:a:dotcms:dotcms:23.01.1
  • Dotcms » Dotcms » Version: 23.01.10
    cpe:2.3:a:dotcms:dotcms:23.01.10
  • Dotcms » Dotcms » Version: 23.01.11
    cpe:2.3:a:dotcms:dotcms:23.01.11
  • Dotcms » Dotcms » Version: 23.01.12
    cpe:2.3:a:dotcms:dotcms:23.01.12
  • Dotcms » Dotcms » Version: 23.01.13
    cpe:2.3:a:dotcms:dotcms:23.01.13
  • Dotcms » Dotcms » Version: 23.01.14
    cpe:2.3:a:dotcms:dotcms:23.01.14
  • Dotcms » Dotcms » Version: 23.01.15
    cpe:2.3:a:dotcms:dotcms:23.01.15
  • Dotcms » Dotcms » Version: 23.01.16
    cpe:2.3:a:dotcms:dotcms:23.01.16
  • Dotcms » Dotcms » Version: 23.01.17
    cpe:2.3:a:dotcms:dotcms:23.01.17
  • Dotcms » Dotcms » Version: 23.01.2
    cpe:2.3:a:dotcms:dotcms:23.01.2
  • Dotcms » Dotcms » Version: 23.01.3
    cpe:2.3:a:dotcms:dotcms:23.01.3
  • Dotcms » Dotcms » Version: 23.01.4
    cpe:2.3:a:dotcms:dotcms:23.01.4
  • Dotcms » Dotcms » Version: 23.01.5
    cpe:2.3:a:dotcms:dotcms:23.01.5
  • Dotcms » Dotcms » Version: 23.01.6
    cpe:2.3:a:dotcms:dotcms:23.01.6
  • Dotcms » Dotcms » Version: 23.01.7
    cpe:2.3:a:dotcms:dotcms:23.01.7
  • Dotcms » Dotcms » Version: 23.01.8
    cpe:2.3:a:dotcms:dotcms:23.01.8
  • Dotcms » Dotcms » Version: 23.01.9
    cpe:2.3:a:dotcms:dotcms:23.01.9
  • Dotcms » Dotcms » Version: 23.02
    cpe:2.3:a:dotcms:dotcms:23.02
  • Dotcms » Dotcms » Version: 23.03
    cpe:2.3:a:dotcms:dotcms:23.03
  • Dotcms » Dotcms » Version: 23.05
    cpe:2.3:a:dotcms:dotcms:23.05
  • Dotcms » Dotcms » Version: 23.06
    cpe:2.3:a:dotcms:dotcms:23.06
  • Dotcms » Dotcms » Version: 23.07
    cpe:2.3:a:dotcms:dotcms:23.07
  • Dotcms » Dotcms » Version: 23.08.16
    cpe:2.3:a:dotcms:dotcms:23.08.16
  • Dotcms » Dotcms » Version: 23.09.7
    cpe:2.3:a:dotcms:dotcms:23.09.7
  • Dotcms » Dotcms » Version: 23.10.24
    cpe:2.3:a:dotcms:dotcms:23.10.24
  • Dotcms » Dotcms » Version: 23.10.24.0
    cpe:2.3:a:dotcms:dotcms:23.10.24.0
  • Dotcms » Dotcms » Version: 23.12.21
    cpe:2.3:a:dotcms:dotcms:23.12.21
  • Dotcms » Dotcms » Version: 23.12.22
    cpe:2.3:a:dotcms:dotcms:23.12.22
  • Dotcms » Dotcms » Version: 23.21.22
    cpe:2.3:a:dotcms:dotcms:23.21.22
  • Dotcms » Dotcms » Version: 23.99.13
    cpe:2.3:a:dotcms:dotcms:23.99.13
  • Dotcms » Dotcms » Version: 24.02.20
    cpe:2.3:a:dotcms:dotcms:24.02.20
  • Dotcms » Dotcms » Version: 24.03.01
    cpe:2.3:a:dotcms:dotcms:24.03.01
  • Dotcms » Dotcms » Version: 24.03.11
    cpe:2.3:a:dotcms:dotcms:24.03.11
  • Dotcms » Dotcms » Version: 24.03.22
    cpe:2.3:a:dotcms:dotcms:24.03.22
  • Dotcms » Dotcms » Version: 24.04.05
    cpe:2.3:a:dotcms:dotcms:24.04.05
  • Dotcms » Dotcms » Version: 24.04.16
    cpe:2.3:a:dotcms:dotcms:24.04.16
  • Dotcms » Dotcms » Version: 24.04.23
    cpe:2.3:a:dotcms:dotcms:24.04.23
  • Dotcms » Dotcms » Version: 24.04.24
    cpe:2.3:a:dotcms:dotcms:24.04.24
  • Dotcms » Dotcms » Version: 24.05.13
    cpe:2.3:a:dotcms:dotcms:24.05.13
  • Dotcms » Dotcms » Version: 24.05.20
    cpe:2.3:a:dotcms:dotcms:24.05.20
  • Dotcms » Dotcms » Version: 5.1.5
    cpe:2.3:a:dotcms:dotcms:5.1.5
  • Dotcms » Dotcms » Version: 5.1.6
    cpe:2.3:a:dotcms:dotcms:5.1.6
  • Dotcms » Dotcms » Version: 5.2.0
    cpe:2.3:a:dotcms:dotcms:5.2.0
  • Dotcms » Dotcms » Version: 5.2.1
    cpe:2.3:a:dotcms:dotcms:5.2.1
  • Dotcms » Dotcms » Version: 5.2.2
    cpe:2.3:a:dotcms:dotcms:5.2.2
  • Dotcms » Dotcms » Version: 5.2.3
    cpe:2.3:a:dotcms:dotcms:5.2.3
  • Dotcms » Dotcms » Version: 5.2.4
    cpe:2.3:a:dotcms:dotcms:5.2.4
  • Dotcms » Dotcms » Version: 5.2.5
    cpe:2.3:a:dotcms:dotcms:5.2.5
  • Dotcms » Dotcms » Version: 5.2.6
    cpe:2.3:a:dotcms:dotcms:5.2.6
  • Dotcms » Dotcms » Version: 5.2.7
    cpe:2.3:a:dotcms:dotcms:5.2.7
  • Dotcms » Dotcms » Version: 5.2.8
    cpe:2.3:a:dotcms:dotcms:5.2.8
  • Dotcms » Dotcms » Version: 5.2.8.1
    cpe:2.3:a:dotcms:dotcms:5.2.8.1
  • Dotcms » Dotcms » Version: 5.2.8.2
    cpe:2.3:a:dotcms:dotcms:5.2.8.2
  • Dotcms » Dotcms » Version: 5.2.8.3
    cpe:2.3:a:dotcms:dotcms:5.2.8.3
  • Dotcms » Dotcms » Version: 5.2.8.4
    cpe:2.3:a:dotcms:dotcms:5.2.8.4
  • Dotcms » Dotcms » Version: 5.3.0
    cpe:2.3:a:dotcms:dotcms:5.3.0
  • Dotcms » Dotcms » Version: 5.3.1
    cpe:2.3:a:dotcms:dotcms:5.3.1
  • Dotcms » Dotcms » Version: 5.3.2
    cpe:2.3:a:dotcms:dotcms:5.3.2
  • Dotcms » Dotcms » Version: 5.3.3
    cpe:2.3:a:dotcms:dotcms:5.3.3
  • Dotcms » Dotcms » Version: 5.3.4
    cpe:2.3:a:dotcms:dotcms:5.3.4
  • Dotcms » Dotcms » Version: 5.3.4.1
    cpe:2.3:a:dotcms:dotcms:5.3.4.1
  • Dotcms » Dotcms » Version: 5.3.5
    cpe:2.3:a:dotcms:dotcms:5.3.5
  • Dotcms » Dotcms » Version: 5.3.6
    cpe:2.3:a:dotcms:dotcms:5.3.6
  • Dotcms » Dotcms » Version: 5.3.6.1
    cpe:2.3:a:dotcms:dotcms:5.3.6.1
  • Dotcms » Dotcms » Version: 5.3.7
    cpe:2.3:a:dotcms:dotcms:5.3.7
  • Dotcms » Dotcms » Version: 5.3.7.1
    cpe:2.3:a:dotcms:dotcms:5.3.7.1
  • Dotcms » Dotcms » Version: 5.3.8
    cpe:2.3:a:dotcms:dotcms:5.3.8
  • Dotcms » Dotcms » Version: 5.3.8.1
    cpe:2.3:a:dotcms:dotcms:5.3.8.1
  • Dotcms » Dotcms » Version: 5.3.8.10
    cpe:2.3:a:dotcms:dotcms:5.3.8.10
  • Dotcms » Dotcms » Version: 5.3.8.11
    cpe:2.3:a:dotcms:dotcms:5.3.8.11
  • Dotcms » Dotcms » Version: 5.3.8.12
    cpe:2.3:a:dotcms:dotcms:5.3.8.12
  • Dotcms » Dotcms » Version: 5.3.8.13
    cpe:2.3:a:dotcms:dotcms:5.3.8.13
  • Dotcms » Dotcms » Version: 5.3.8.14
    cpe:2.3:a:dotcms:dotcms:5.3.8.14
  • Dotcms » Dotcms » Version: 5.3.8.2
    cpe:2.3:a:dotcms:dotcms:5.3.8.2
  • Dotcms » Dotcms » Version: 5.3.8.3
    cpe:2.3:a:dotcms:dotcms:5.3.8.3
  • Dotcms » Dotcms » Version: 5.3.8.4
    cpe:2.3:a:dotcms:dotcms:5.3.8.4
  • Dotcms » Dotcms » Version: 5.3.8.5
    cpe:2.3:a:dotcms:dotcms:5.3.8.5
  • Dotcms » Dotcms » Version: 5.3.8.6
    cpe:2.3:a:dotcms:dotcms:5.3.8.6
  • Dotcms » Dotcms » Version: 5.3.8.6.1
    cpe:2.3:a:dotcms:dotcms:5.3.8.6.1
  • Dotcms » Dotcms » Version: 5.3.8.6.2
    cpe:2.3:a:dotcms:dotcms:5.3.8.6.2
  • Dotcms » Dotcms » Version: 5.3.8.7
    cpe:2.3:a:dotcms:dotcms:5.3.8.7
  • Dotcms » Dotcms » Version: 5.3.8.8
    cpe:2.3:a:dotcms:dotcms:5.3.8.8
  • Dotcms » Dotcms » Version: 5.3.8.9
    cpe:2.3:a:dotcms:dotcms:5.3.8.9
  • Dotcms » Dotcms » Version: 5.3.9
    cpe:2.3:a:dotcms:dotcms:5.3.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved