Lucene search
PRIOn knowledge basePRION:CVE-2020-6754HistoryFeb 05, 2020 - 5:15 p.m.
Directory traversal
2020-02-0517:15:00
PRIOn knowledge base
www.prio-n.com
2
dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/assets (which should be a protected directory). Additionally, attackers can upload temporary files (e.g., .jsp files) into /webapps/ROOT/assets/tmp_upload, which can lead to remote command execution (with the permissions of the user running the dotCMS application).
Related
cve
cve
CVE-2020-6754
2020-02-05 17:15:10
nvd
nvd
CVE-2020-6754
2020-02-05 17:15:10
osv
osv
CVE-2020-6754
2020-02-05 17:15:10
checkpoint_advisories
checkpoint_advisories
dotCMS CMSFilter Authentication Bypass (CVE-2020-6754)
2020-05-01 00:00:00
cvelist
cvelist
CVE-2020-6754
2020-02-05 16:08:28