Sql injection

2019-06-1814:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.

CPENameOperatorVersion
dotcmslt5.1.6

CPE	Name	Operator	Version
	dotcms	lt	5.1.6

References

dotcms.com/security/SI-53

github.com/dotCMS/core/issues/16624