Directory traversal

2016-04-1815:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.1%

JSON

Directory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote authenticated administrators to read arbitrary files via a … (dot dot) in the fileName parameter.

CPENameOperatorVersion
dotcmsle3.5

CPE	Name	Operator	Version
	dotcms	le	3.5

References

dotcms.com/security/SI-34

seclists.org/fulldisclosure/2016/Apr/36