dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user must be an authenticated manager in the dotCMS system to exploit this vulnerability.
References
Link | Resource |
---|---|
https://github.com/dotCMS/core/compare/v5.3.8.1...v20.10.1 | Patch Third Party Advisory |
https://github.com/dotCMS/core/issues/19500 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-12-30T18:24:20
Updated: 2020-12-30T18:24:20
Reserved: 2020-10-27T00:00:00
Link: CVE-2020-27848
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-12-30T19:15:13.123
Modified: 2021-01-04T15:00:49.593
Link: CVE-2020-27848
JSON object: View
Redhat Information
No data.
CWE