Description

DotCMS allows an unauthenticated user to upload arbitrary files. An attacker can exploit it to achieve remote code execution.

Remediation

Upgrade to the latest version of DotCMS

References

Multipart File Directory Traversal can lead to remote execution

Hacking a Bank by Finding a 0day in DotCMS

Related Vulnerabilities

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23179)

RubyGems Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-1000073)

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2018-11325)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0924)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15073)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Unauthenticated File Upload Code Execution Known Vulnerabilities CWE-434 CVE-2022-26352