Alpine/curl: medium 6.1
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
Action: Upgrade curl to 7.64.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.64.0-r0 | - |
Fixed versions
| 7.64.0-r0 |
Sources
published · modified · JSON