CVE-2019-12309

2019-05-2319:21:17

mitre

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

JSON

dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction of a ZIP archive.

References

dotcms.com/security/SI-48

github.com/dotCMS/core/compare/605e5db...364c910