H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2022-26352

dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.

Vulnerability
TypeVulnerability
External ID—
First seen2022-08-25
Last seen2022-08-25

Confidence

—

dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productdotCMS dotCMS
Added2022-08-25
Due date2022-09-15
9 recorded

Relationships

mitigates
from Remediate CVE-2022-26352
Mitigation
related-to
to Command Delimiters
Technique
related-to
to HTTP Request Splitting
Technique
related-to
to HTTP Response Splitting
Technique
related-to
to Manipulating Web Input to File System Calls
Technique
related-to
to Path Traversal
Technique
related-to
to Using Escaped Slashes in Alternate Encoding
Technique
related-to
to Using Slashes and URL Encoding Combined to Bypass Validation Logic
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
3 external

References

nvd
CVE-2022-26352
open
cwe
CWE-22
open
cwe
CWE-138
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance