dotCMS · dotCMS

CVE-2022-26352

dotCMS Unrestricted Upload of File Vulnerability

已被用于攻击被勒索软件利用严重 9.8 受攻击概率：91%

这是什么

An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, in which the file is saved outside of the intended storage location. If anonymous content creation is enabled, this allows an unauthenticated attacker to upload an executable file, such as a .jsp file, that can lead to remote code execution.

CISA: dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.

该怎么做

Apply updates per vendor instructions.

美国联邦机构的修复期限：2022年9月15日

加入 CISA 列表: 2022年8月25日
发布日期: 2022年7月17日
严重程度: 严重 9.8 CVSS 3.1
未来 30 天遭受攻击的概率（EPSS）: 91% 位列所有已知漏洞的前 0.2%
弱点类型: CWE-22 CWE-138
更多详情: NVD · CVE.org · CISA

全部参考链接（2）

来源：Known Exploited Vulnerabilities（CISA，公有领域）、CVE records（cve.org）和 EPSS（FIRST）。受攻击概率是 EPSS 对未来 30 天内有人尝试利用该漏洞的估计。