Critical · published July 17, 2022
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.
🚨 A crafty multipart form request could allow an unauthenticated attacker to post a sneaky executable file, all because the filename isn't properly sanitized in dotCMS! 🔥 Think of it like a food delivery service that accepts any dish without checking the recipe. An attacker can send a file disguised under an innocent name, and it can end up cooking up chaos in your system by running harmful code! If exploited, this vulnerability could allow attackers to upload malicious files, leading to a devastating scenario where they gain remote code execution on your server. Picture an intruder slipping a dangerous package into your delivery — once it’s in, the damage could be catastrophic!
Think of it like a food delivery service that accepts any dish without checking the recipe. An attacker can send a file disguised under an innocent name, and it can end up cooking up chaos in your system by running harmful code! This vulnerability in the ContentResource API allows for directory traversal by exploiting unsanitized filenames in file uploads. When anonymous content creation is enabled, attackers can stealthily upload malicious executable files, like .jsp files.
If exploited, this vulnerability could allow attackers to upload malicious files, leading to a devastating scenario where they gain remote code execution on your server. Picture an intruder slipping a dangerous package into your delivery — once it’s in, the damage could be catastrophic! Immediate action is crucial! Disable anonymous content creation in your dotCMS instance, and patch to the latest version (22.02 or newer). Regularly audit file upload functionalities to ensure proper sanitization of filenames. You’ve got this! By tackling this vulnerability now, you're stepping into your security hero cape! 🦸♂️🛡️