Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-19138
9.8
CRITICALCVSS v3
Published
September 8, 2021
CVSS v2
10 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component "/src/main/java/com/dotmarketing/filters/CMSFilter.java".
GitHub