CVE-2017-11466 File upload in n/a
Authenticated administrators can upload malicious JSP files to arbitrary locations via directory traversal, leading to remote code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-11466?
CVE-2017-11466 is a high-severity vulnerability in Dotcms Dotcms, published on 20 Jul 2017. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to servlets/ajax_file_upload. This results in arbitrary code execution by requesting the .jsp file at a /assets URI.
Weakness: CWE-434
Which versions are affected by CVE-2017-11466?
It affects 1 product.
Products include Dotcms Dotcms.
How do I fix CVE-2017-11466?
No fix has been published for CVE-2017-11466 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-11466 being exploited?
There is no known exploitation of CVE-2017-11466 in the wild and no public exploit code.
Other vulnerabilities in Dotcms Dotcms
Sources
Also known as GHSA-234x-7qj3-r3fj.