Description

An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution.

Remediation

References

CVE-2022-45783

Related Vulnerabilities

WordPress Plugin Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More SQL Injection (3.3.0.3)

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9046)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.14)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-45038)

WordPress Plugin Import and export users and customers Multiple Vulnerabilities (1.9.4.6)

Severity

Medium

Classification

CVE-2022-45783 CWE-22 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities