https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:38:10.507056+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-3165 CVE-2024-3165 — Database Credential Exposure in the Logs 2026-10-02T12:38:10.508233+00:00

Affected: dotCMS core, dotcms

System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment.

OWASP Top 10 - A05) Insecure Design

OWASP Top 10 - A05) Security Misconfiguration

OWASP Top 10 - A09) Security Logging and Monitoring Failure