CVE-2019-12872

CVE-2019-12872

EPSS 1.3%

dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://dotcms.com/security/SI-53 https://github.com/dotCMS/core/issues/16624