Security Advisory

CVE-2019-12872

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-18 13:20:44

Last updated 2024-08-04 23:32:55

Assigner mitre

State PUBLISHED

dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.