Description
dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction of a ZIP archive.
Unscored
CVE-2019-12309
EUVD-2019-3946GHSA-j85g-ppxw-669h
dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the …
Published May 23, 2019 · Updated Aug 4, 2024 · Assigned by mitre