Input validation

In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 redirects that the remote URL returns. Because there is no...

Design/Logic Flaw

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...

PT-2023-13520

Name of the Vulnerable Software and Affected Versions dotCMS versions 5.x through 22.06 Description The issue allows an attacker to call the TempResource multiple times, requesting the dotCMS server to download a large file each time. If done repeatedly, this will result in Tomcat request-thread...

CVE-2022-45783: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution...

PT-2023-13519

Name of the Vulnerable Software and Affected Versions dotCMS versions 5.x through 22.06 Description The issue allows a user to create a temporary file based on a passed-in URL using the TempFileAPI, which attempts to block Server-Side Request Forgery SSRF access to local IP addresses or private...

CVE-2022-37033

In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 redirects that the remote URL returns. Because there is no...

CVE-2022-37033: Server-Side Request Forgery (SSRF)

In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 redirects that the remote URL returns. Because there is no...

CVE-2022-37033

In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 redirects that the remote URL returns. Because there is no...

CVE-2022-45782

CVE-2022-45782 affects dotCMS core versions 5.3.8.5–5.3.8.15 and 21.03–22.10.1. The root cause is a cryptographically insecure random generation algorithm used for password-reset token generation, enabling account takeover. The connected documents confirm this vulnerability and its impact. No rem...

CVE-2022-45783

Context: CVE-2022-45783 affects dotCMS core 4.x up to 22.10.2. Vulnerability: An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution. Impact (as stated): Potentially high impact on confidentiality, integrity, and availability via RCE. References/ind...

CVE-2022-45782: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...

CVE-2022-45783

An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution...

CVE-2022-37034

In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file. If done repeatedly, this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests...

CVE-2022-45782

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...

PT-2023-14751

Name of the Vulnerable Software and Affected Versions dotCMS core versions 5.3.8.5 through 5.3.8.15 dotCMS core versions 21.03 through 22.10.1 Description An issue was discovered in dotCMS core where a cryptographically insecure random generation algorithm is used for password-reset token...

CVE-2022-37034: Uncontrolled Recursion

In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file. If done repeatedly, this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests...

CVE-2022-37034

In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file. If done repeatedly, this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests...

CVE-2022-45782

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...

CVE-2022-37033

In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 redirects that the remote URL returns. Because there is no...

dotCMS code issues and vulnerabilities

dotCMS is a content management system CMS from the United States dotCMS. The system supports modules such as RSS feeds, blogs, and forums, and is easy to extend and build. A security vulnerability exists in dotCMS version 5.x-22.06, which stems from TempFileAPI allowing a user to create a tempora...