← All credits
Matan Sandori
2 vulnerability records and advisories credit this contributor.
CVE-2026-5638
HerikLyma CPPWebFramework path traversal
CVE-2025-8311
dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys.
The vulnerability