PT-2022-2512

Name of the Vulnerable Software and Affected Versions dotCMS versions 3.0 through 22.02 Description An issue was discovered in the ContentResource API, allowing attackers to craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, i...