CVE-2019-12309

dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction of a ZIP archive.

Date published : 2019-05-23

https://dotcms.com/security/SI-48

https://github.com/dotCMS/core/compare/605e5db…364c910