CVE-2016-2355

7.5

HIGHCVSS v2

Published

December 19, 2016

Affected

1 project

Assigned by

[email protected]

Severity scale

010

Description

SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1.

dotCMS/core

GitHubThe Visual Headless Content Management System for Enterprises

NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2016-2355

Description

More on this CVE