CVE-2020-19138

2021-09-0821:15:09

Google

osv.dev

8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

JSON

Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component “/src/main/java/com/dotmarketing/filters/CMSFilter.java”.

CPENameOperatorVersion
coreeq3.6.0
coreeq3.6.1
coreeq5.2.3
coreeqpre3.5buildrevert
coreeq5.2.1
coreeq3.5
coreeq5.2.0
coreeq3.5_Preview01
coreeq3.5_Preview02
coreeq3.2.1