CVE-2016-8600

Name of the Vulnerable Software and Affected Versions dotCMS version 3.2.1

Description The issue allows an attacker to bypass the captcha check by loading the captcha once, filling it with the correct value, and then reusing this correct value for subsequent forms that have a captcha check.

Recommendations For dotCMS version 3.2.1, consider implementing a unique captcha for each form submission to prevent reuse of previously entered correct values. As a temporary workaround, restrict the ability to submit forms with a captcha check to minimize the risk of exploitation.