Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Dot CMS Uncontrolled Recursion Vulnerability - CVE-2022-37034 - Vulnerability Database
Dot CMS

Dot CMS Uncontrolled Recursion Vulnerability - CVE-2022-37034

Medium
Reference: CVE-2022-37034
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-37034
Title: Dot CMS Uncontrolled Recursion Vulnerability
Overview:

In dotCMS 5.x-22.06 it is possible to call the TempResource multiple times each time requesting the dotCMS server to download a large file. If done repeatedly this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests.