Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/assets (which should be a protected directory). Additionally, attackers can upload temporary files (e.g., .jsp files) into /webapps/ROOT/assets/tmp_upload, which can lead to remote command execution (with the permissions of the user running the dotCMS application).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
dotCMS 代码问题漏洞
Vulnerability Description
dotCMS是美国dotCMS公司的一套内容管理系统（CMS）。该系统支持RSS订阅、博客、论坛等模块，并具有易于扩展和构建的特点。 dotCMS 5.2.4之前版本中存在代码问题漏洞，该漏洞源于不正确的访问控制。攻击者可利用该漏洞读取或执行文件，或执行命令。
CVSS Information
N/A
Vulnerability Type
N/A