CVE-2022-26352Used in ransomware
DO
dotCMS dotCMS
dotCMS Unrestricted Upload of File Vulnerability
What it is
dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.