high8.8
CVE-2020-18875
Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.
Impact
Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dotcms | Dotcms | before 5.1.0 |