Lucene search
HistoryJun 08, 2012 - 4:55 p.m.
CVE-2012-1826
cve-2012-1826
dotcms
remote execution
java code
authenticated users
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.2%
dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.
Affected configurations
Node
dotcmsdotcmsMatch1.9
ORdotcmsdotcmsMatch1.9.2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| dotcms:dotcms | dotcms | eq | 1.9 |
| dotcms:dotcms | dotcms | eq | 1.9.2.1 |
References
Social References
More
Related
cert
cert
dotCMS template permissions allow arbitrary code execution
2012-05-25 00:00:00
cvelist
cvelist
CVE-2012-1826
2012-06-08 16:00:00
nvd
nvd
CVE-2012-1826
2012-06-08 16:55:00
prion
prion
Code injection
2012-06-08 16:55:00
seebug
seebug
dotCMS 任意代码执行漏洞
2012-05-29 00:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.2%
Related for CVE-2012-1826