Description
dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.dotcms:dotcms | >= 1.9, < 1.9.5.1 | 1.9.5.1 | GHSA-42vg-q6mw-cfh5 |
References
- 53688 vdb-entry
- http://dotcms.com/dotCMSVersions/
- VU#898083 third-party-advisory
- https://github.com/dotCMS/dotCMS/issues/281
- https://github.com/dotCMS/dotCMS/issues/261
- 82240 vdb-entry
- 49276 third-party-advisory
- https://gist.github.com/2627440