Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-18875

Description

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.

POC

Reference

No PoCs from references.

Github

- https://github.com/Live-Hack-CVE/CVE-2020-18875