dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.j…

Published Jun 18, 2019 · Updated Aug 4, 2024 · Assigned by mitre