Critical RCE Bug Reported in dotCMS Content Management Software | allinfosecnews.com

May 4, 2022, 12:05 p.m. | noreply@blogger.com (Ravie Lakshmanan)

The Hacker News thehackernews.com

A pre-authenticated remote code execution vulnerability has been disclosed in dotCMS, an open-source content management system written in Java and "used by over 10,000 clients in over 70 countries around the globe, from Fortune 500 brands and mid-sized businesses."
The critical flaw, tracked as CVE-2022-26352, stems from a directory traversal attack when performing file uploads, enabling an

bug critical management rce software

More from thehackernews.com / The Hacker News

BlackTech Targets Tech, Research, and Gov Sectors New 'Deuterbear' Tool 14 hours ago | thehackernews.com

actor asia attack backdoor +15

How Attackers Can Own a Business Without Touching the Endpoint 17 hours ago | thehackernews.com

apps attack attackers attack techniques +14

Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers 17 hours ago | thehackernews.com

akira akira ransomware america businesses +19

Hackers Target Middle East Governments with Evasive "CR4T" Backdoor 22 hours ago | thehackernews.com

backdoor campaign cybersecurity cybersecurity company +15

OfflRouter Malware Evades Detection in Ukraine for Almost a Decade 1 day, 14 hours ago | thehackernews.com

analysis called cisco cisco talos +22

FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor 1 day, 14 hours ago | thehackernews.com

auto auto industry automotive automotive industry +17

Recover from Ransomware in 5 Minutes—We will Teach You How! 1 day, 17 hours ago | thehackernews.com

attack back can cdp +21

New Android Trojan 'SoumniBot' Evades Detection with Clever Tricks 1 day, 17 hours ago | thehackernews.com

analysis android android trojan called +16

How to Conduct Advanced Static Analysis in a Malware Sandbox 1 day, 17 hours ago | thehackernews.com

advanced analysis can dynamic +17

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Junior Cybersecurity Triage Analyst

@ Peraton | Linthicum, MD, United States

View on infosec-jobs.com

Associate Director, Operations Compliance and Investigations Management

@ Legend Biotech | Raritan, New Jersey, United States

View on infosec-jobs.com

Analyst, Cyber Operations Engineer

@ BlackRock | SN6-Singapore - 20 Anson Road

View on infosec-jobs.com

Working Student/Intern/Thesis: Hardware based Cybersecurity Training (m/f/d)

@ AVL | Regensburg, DE

View on infosec-jobs.com