medium4.9
CVE-2019-12309
dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files.
Impact
dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction of a ZIP archive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dotcms | Dotcms | before 5.1.0 |