CVE-2020-18875

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl velocity files...

Improper access control

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl velocity files...

CVE-2020-18875

DotCMS before version 5.1 suffers from incorrect access control in velocity (vtl) files, allowing remote attackers to inject client configurations and gain privileges. The issue is documented across multiple sources (including Red Hat and PT-Security) with the concrete remediation: upgrade to Dot...

DotCMS 注入漏洞

Dotcms dotCMS is a content management system CMS from the American company dotCMS Dotcms. The system supports RSS feeds, blogs, forums and other modules, and is easy to extend and build. A security vulnerability exists in DotCMS versions prior to 5.1, which stems from incorrect access control for...