PT-2023-13519 · Dotcms · Dotcms

Published 2023-02-01 · Updated 2025-03-27 · CVE-2022-37033

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions dotCMS versions 5.x through 22.06

Description The issue allows a user to create a temporary file based on a passed-in URL using the TempFileAPI, which attempts to block Server-Side Request Forgery (SSRF) access to local IP addresses or private subnets. However, the TempFileAPI follows any 302 redirects returned by the remote URL without re-validating the redirect URL. This enables the TempFileAPI to return data from local or private hosts that should not be accessible remotely.

Recommendations For dotCMS versions 5.x through 22.06, consider disabling the TempFileAPI until a patch is available to prevent potential SSRF attacks. Restrict access to the TempFileAPI to minimize the risk of exploitation. Avoid using the TempFileAPI to create temporary files based on user-provided URLs until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2022-37033

Affected Products

Dotcms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-37033 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37033 · Vendor Advisory
• https://dotcms.com/security/SI-64 · Vendor Advisory
• https://t.me/cvenotify/116550 · Telegram Post
• https://t.me/cvenotify/43391 · Telegram Post
• https://t.me/cibsecurity/57355 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37033 · Note