Path Traversal

2019-07-1004:47:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

26.9%

JSON

dotCMS is vulnerable to path traversal vulnerability. A remote, authenticated attacker could exploit the flaw due to insecure extraction of ZIP archives.

CPENameOperatorVersion
dotcms-uile4.0.1
dotcms-uile5.0.3
dotcms-uile4.0.1
dotcms-uile5.0.3

Name	Operator	Version
dotcms-ui	le	4.0.1
dotcms-ui	le	5.0.3
dotcms-ui	le	4.0.1
dotcms-ui	le	5.0.3

References

dotcms.com/security/SI-48

github.com/dotCMS/core/commit/74beb99525100e1867263fc4e1a3f4c595fedce9

github.com/dotCMS/core/compare/605e5db...364c910

github.com/dotCMS/core/issues/15812

0.001 Low

EPSS

Percentile

26.9%

JSON

Related for VERACODE:20756