Description

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.

Remediation

References

CVE-2020-18875

Related Vulnerabilities

Joomla! Core 1.7.x Information Disclosure (1.7.0 - 1.7.4)

Moodle CVE-2024-33999 Vulnerability (CVE-2024-33999)

Grafana Other Vulnerability (CVE-2021-28147)

WordPress Plugin Facebook for WooCommerce Cross-Site Request Forgery (1.9.14)

CubeCart Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2024-33438)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2020-18875