CVE-2019-12872

Published June 18th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.

The Visual Headless Content Management System for Enterprises

GitHub

947