[ Vendor · 2 CVEs ]

dotCMS

CVEs affecting dotCMS published in the last 30 days, plus any dotCMS CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2022-26352 17 Jul 2022 CVSS 9.8 dotCMS Unrestricted Upload of FileAn issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose… Exploited
CVE-2022-26352 17 Jul 2022 CVSS 9.8 dotCMS Unrestricted Upload of FileAn issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose… Exploited