CVE

CVE-2019-12309

admin

CVE-2019-12309

dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction of a ZIP archive.

Source: CVE-2019-12309

Exit mobile version