CVE-2012-1826

dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template

published June 8, 2012

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02165 · 82.0th percentile
Published
2012-06-08T16:00Z
EPSS history
Timeline
  • 08 JUN 16:00Z
    dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template
    cvelistv5