CVE-2025-8311

Name of the Vulnerable Software and Affected Versions dotCMS versions 24.03.22 and after

Description A Boolean-based blind SQL injection vulnerability exists in the /api/v1/contenttype endpoint. The endpoint utilizes the sites query parameter, which accepts a comma-separated list of site identifiers or keys. The sites parameter is directly concatenated into a SQL query without proper sanitization, allowing an authenticated attacker with low privileges to extract data from the database, perform privilege escalation, or trigger denial-of-service conditions. Exploitation was verified using tools such as SQLMap, enabling full database exfiltration and potential denial-of-service conditions via crafted payloads.

Recommendations Update to dotCMS version 25.08.14 or later. Update to dotCMS version 25.07.10-1v2 LTS or later. Update to dotCMS version 24.12.27v10 LTS or later. Update to dotCMS version 24.04.24v21 LTS or later.