How severe is CVE-2022-45782?

CVE-2022-45782 has a CVSS v3 score of 8.8 (HIGH).

CVE-2022-45782

Name: dotcms
Author: dotcms

8.8HIGH

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account

公開日: 2/1/2023更新日: 3/27/2025

説明

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover.

AI分析AIによる分析

影響を受ける製品

dotcmsdotcms

参照

https://www.dotcms.com/security/SI-66
Vendor Advisory
https://www.dotcms.com/security/SI-66
Vendor Advisory