Skip to content
OpenAdvisories

Package · Maven

com.dotcms:dotcms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2012-1826

    dotCMS allows remote authenticated users to execute arbitrary Java code

    dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.

    com.dotcms:dotcms Maven