Skip to content

dotCMS dotCMS Cloud Services (dCS)

CVE-2025-8311 Critical 9.4 dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separat 1.7%