Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
DotCMS unrestricted file upload (CVE-2022-26352) - Vulnerability Database

DotCMS unrestricted file upload (CVE-2022-26352)

Description

DotCMS allows an unauthenticated user to upload arbitrary files. An attacker can exploit it to achieve remote code execution.

Remediation

Upgrade to the latest version of DotCMS

References

Multipart File Directory Traversal can lead to remote execution
Hacking a Bank by Finding a 0day in DotCMS

Related Vulnerabilities

Kramer VIAware RCE (CVE-2021-36356/CVE-2021-35064) Critical
Common tags: Unauthenticated File Upload Code Execution Known Vulnerabilities
Ektron CMS multiple vulnerabilities High
Common tags: Unauthenticated File Upload Code Execution Known Vulnerabilities
PAN-OS Management Interface Authentication Bypass (CVE-2025-0108) Critical
Common tags: Code Execution Known Vulnerabilities
Apache Struts2 Remote Command Execution (S2-053) Critical
Common tags: Code Execution Known Vulnerabilities
Craft CMS RCE (CVE-2023-41892) Critical
Common tags: Code Execution Known Vulnerabilities

Severity

High

Classification

CVE-2022-26352
CWE-434
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Unauthenticated File Upload
Code Execution
Known Vulnerabilities