Lucene search
China National Vulnerability DatabaseCNVD-2021-93897HistorySep 09, 2021 - 12:00 a.m.
dotCMS file upload vulnerability
2021-09-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
0.006 Low
EPSS
Percentile
77.8%
dotCMS is a powerful Java-based content management system (CMS). dotCMS 5.2.3 and earlier versions are vulnerable to file uploads. A remote attacker can exploit this vulnerability to execute arbitrary code via /src/main/java/com/dotmarketing/filters/CMSFilter.java.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dotcms dotcms | le | 5.2.3 |
Related
prion
prion
Unrestricted file upload
2021-09-08 21:15:00
cve
cve
CVE-2020-19138
2021-09-08 21:15:09
cvelist
cvelist
CVE-2020-19138
2021-09-08 20:18:23
osv
osv
CVE-2020-19138
2021-09-08 21:15:09
nvd
nvd
CVE-2020-19138
2021-09-08 21:15:09