CVE-2012-1826 dotCMS allows remote authenticated users to execute arbitrary Java code
Authenticated attackers can execute arbitrary Java code via crafted XSLT or Velocity templates in dotCMS, requiring an upgrade to secure the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-1826?
CVE-2012-1826 is a medium-severity code injection vulnerability in Dotcms Dotcms, published on 8 Jun 2012. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.
Weakness: CWE-264
Which versions are affected by CVE-2012-1826?
2 open source packages ship an affected version, including com.dotcms:dotcms. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
com.dotcms:dotcms Maven | From 1.9 | 1.9.5.1 |
com.dotcms:dotcms Maven | From 1.9 | 1.9.5.1 |
Products include Dotcms Dotcms.
How do I fix CVE-2012-1826?
Upgrade com.dotcms:dotcms to 1.9.5.1 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2012-1826 being exploited?
There is no known exploitation of CVE-2012-1826 in the wild and no public exploit code.
Other vulnerabilities in Dotcms Dotcms
Sources
Also known as GHSA-42vg-q6mw-cfh5.