CVE-2020-18875

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files

published August 18, 2021

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01983 · 80.4th percentile
Published
2021-08-18T16:55Z
EPSS history
Timeline
  • 18 AUG 16:55Z
    Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files
    cvelistv5