PT-2022-22958 · Dotcms · Dotcms

Published 2022-11-10 · Updated 2025-05-01 · CVE-2022-35740

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 22.06 dotCMS version 5.3.8.12 dotCMS version 21.06.9 dotCMS version 22.03.2

Description The issue allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter. This can be exploited to avoid dotCMS's path-based XSS prevention, such as "require login" filters, and access restricted resources. For example, an attacker could place a semicolon immediately before a / character that separates elements of a filesystem path, revealing file content that is ordinarily only visible to signed-in users. This issue can be chained with other exploit code to achieve XSS attacks against dotCMS.

Recommendations For dotCMS versions prior to 22.06, update to version 22.06 or later to resolve the issue. For dotCMS version 5.3.8.12, no specific recommendation is provided. For dotCMS version 21.06.9, no specific recommendation is provided. For dotCMS version 22.03.2, no specific recommendation is provided. As a temporary workaround, consider restricting access to sensitive resources until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-35740

Affected Products

Dotcms

References · 6

• 🔥 https://github.com/dotCMS/patches-hotfixes/tree/master/com.dotcms.security.matrixparams · Exploit
• 🔥 https://dotcms.com/security/SI-63 · Exploit
• https://osv.dev/vulnerability/CVE-2022-35740 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35740 · Security Note
• https://t.me/cibsecurity/52865 · Telegram Post
• https://t.me/cvenotify/120491 · Telegram Post