Dotcms · Dotcms · CVE-2025-8311
**Name of the Vulnerable Software and Affected Versions**
dotCMS versions 24.03.22 and after
**Description**
A Boolean-based blind SQL injection vulnerability exists in the `/api/v1/contenttype` endpoint. The endpoint utilizes the `sites` query parameter, which accepts a comma-separated list of site identifiers or keys. The `sites` parameter is directly concatenated into a SQL query without proper sanitization, allowing an authenticated attacker with low privileges to extract data from the database, perform privilege escalation, or trigger denial-of-service conditions. Exploitation was verified using tools such as SQLMap, enabling full database exfiltration and potential denial-of-service conditions via crafted payloads.
**Recommendations**
Update to dotCMS version 25.08.14 or later.
Update to dotCMS version 25.07.10-1v2 LTS or later.
Update to dotCMS version 24.12.27v10 LTS or later.
Update to dotCMS version 24.04.24v21 LTS or later.