{"cveID":"CVE-2022-26352","vendorProject":"dotCMS","product":"dotCMS","vulnerabilityName":"dotCMS Unrestricted Upload of File Vulnerability","dateAdded":"2022-08-25","shortDescription":"dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.","requiredAction":"Apply updates per vendor instructions.","dueDate":"2022-09-15","knownRansomwareCampaignUse":"Known","notes":"https://www.dotcms.com/security/SI-62;  https://nvd.nist.gov/vuln/detail/CVE-2022-26352","cwes":["CWE-22","CWE-138"],"year":2022,"state":"unmapped","stale_reasons":[],"mappings":[],"techniques":[],"mapping_types":[],"has_exploitation_technique":false,"mapping_attack_versions":[],"mapping_domains":[],"sigma_coverage":null,"sigma_rules_tagged_cve":[],"added_after_mapping_snapshot":false,"_source":"kevmap","_built":"2026-08-23 05:47 UTC","_attack_version":"19.2"}