CVE-2019-12872

dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2019-06-18

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Dotcms (Dotcms)

References

• https://dotcms.com/security/SI-53
• https://github.com/dotCMS/core/issues/16624