Path traversal

2019-05-2320:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

JSON

dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction of a ZIP archive.

CPENameOperatorVersion
dotcmslt5.1.0

CPE	Name	Operator	Version
	dotcms	lt	5.1.0

References

dotcms.com/security/SI-48

github.com/dotCMS/core/compare/605e5db...364c910