CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- dotCMS Unrestricted Upload of File Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, in which the file is saved outside of the intended storage location. If anonymous content creation is enabled, this allows an unauthenticated attacker to upload an executable file, such as a .jsp file, that can lead to remote code execution.
Affected products
dotcms: dotcms
References5
- packetstormsecurity.com/files/167365/dotCMS-Shell-Upload.html ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/167365/dotCMS-Shell-Upload.html ExploitThird Party AdvisoryVDB Entry
- groups.google.com/g/dotcms Permissions RequiredThird Party Advisory
- groups.google.com/g/dotcms Permissions RequiredThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=… US Government Resource
Metrics
- CVSS 3.1
-
9.8
CRITICAL
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 91% percentile: 100 · as of 2 November 2026