GCVE-110-CERTCC-2012-898083

Advisory PublishedCVSS 8.5/10

Vulnetix · Advisory published May 25, 2012

The dotCMS content management system version 1.9 and possibly earlier versions, contains a vulnerability that allows users with the appropriate permissions to create a malicious template with arbitrary code.

Download JSON Open in Console

Risk Scores

CVSS 2.0

8.5/10

High · AV:N/AC:M/Au:S/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score6.9remediation_levelUreport_confidenceUCenvironmental_score6.9target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-1826

Transitive aliases

GSD-2012-1826 GHSA-42vg-q6mw-cfh5

References

dotCMS template permissions allow arbitrary code execution

url

dotCMS template permissions allow arbitrary code execution

url

dotCMS template permissions allow arbitrary code execution

advisory

dotCMS template permissions allow arbitrary code execution

discussion

dotCMS template permissions allow arbitrary code execution

discussion

dotCMS template permissions allow arbitrary code execution

exploit

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON