CVE-2022-26352

 

Published at: - 18-07-2022 12:15

Last modified: - 26-07-2022 12:38

Total changes: - 3

Description

An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, in which the file is saved outside of the intended storage location. If anonymous content creation is enabled, this allows an unauthenticated attacker to upload an executable file, such as a .jsp file, that can lead to remote code execution.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• http://packetstormsecurity.com/files/167365/dotCMS-Shell-Upload.html
• https://groups.google.com/g/dotcms

 

Keywords

NVD

 

CVE-2022-26352

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures