Unscored CVE-2020-18875 EUVD-2020-10788GHSA-v5hv-5v7h-rxpc

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vt…

Published Aug 18, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.

References

https://cwe.mitre.org/data/definitions/284.html
https://dotcms.com/security/SI-51
https://github.com/dotCMS/core/issues/15882