Description

An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution.

Remediation

References

CVE-2022-45783

Related Vulnerabilities

WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Scripting (3.4.1)

Oracle HTTP Server Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2015-2808)

WordPress Plugin Thank You Counter Button Cross-Site Scripting (1.8.2)

WordPress Plugin SB Welcome Email Editor Unspecified Vulnerability (4.1)

WordPress Plugin ApplyOnline-Application Form Builder and Manager Arbitrary File Disclosure (1.9.92)

Severity

Medium

Classification

CVE-2022-45783 CWE-22 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities