Vulnerabilities in docCMS
3 resultsCVE-2017-3189—The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to arbitrary file uploadEPSS 6.5%CVE-2017-3188—The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversalEPSS 2.8%CVE-2017-3187—The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgeryEPSS 1.1%