{"cvss":9.8,"datePublished":"2022-08-25","dateUpdated":"2022-08-25","description":"dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.","dueDate":"2022-09-15","id":"CVE-2022-26352","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://www.dotcms.com/security/SI-62;  https://nvd.nist.gov/vuln/detail/CVE-2022-26352","product":"dotCMS","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"dotCMS Unrestricted Upload of File Vulnerability","vendor":"dotCMS"}