CVE-2020-27848
High
Description
dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user must be an authenticated manager in the dotCMS system to exploit this vulnerability.
SeverityHigh
CVSS8.8
Exploit probability—
ProductDotcms
PublishedDec 30, 2020
First seenDec 30, 2020
How to fix
Update
- dotcms dotcms20.10.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dotcms dotcms | v < 20.10.1 | 20.10.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.