CVE-2020-19138

2021-09-0820:18:23

mitre

www.cve.org

9.8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

JSON

Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component “/src/main/java/com/dotmarketing/filters/CMSFilter.java”.

References

github.com/dotCMS/core/issues/17796