VulnerabilityModified
CVE-2022-45783
An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution.
MEDIUM 6.5EPSS 8.47%
Does this matter?
Lower severity and a low EPSS score (8.47%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the dotCMS API can lead to Remote Code Execution.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 8.47% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- dotcms/dotcms
- Source
- cve@mitre.org
References
- https://www.dotcms.com/security/SI-67Vendor Advisory
- https://www.dotcms.com/security/SI-67Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.