Description

DotCMS allows an unauthenticated user to upload arbitrary files. An attacker can exploit it to achieve remote code execution.

Remediation

Upgrade to the latest version of DotCMS

References

Multipart File Directory Traversal can lead to remote execution

Hacking a Bank by Finding a 0day in DotCMS

Related Vulnerabilities

MySQL CVE-2021-2060 Vulnerability (CVE-2021-2060)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-7133)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5546)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5622)

Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-11816)

Severity

High

Classification

CVE-2022-26352 CWE-434 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Unauthenticated File Upload Code Execution Known Vulnerabilities