Security Advisory
CVE-2020-19138
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component "/src/main/java/com/dotmarketing/filters/CMSFilter.java".