Vulnerability Database

296,362

Total vulnerabilities in the database

CVE-2022-37034

In dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting the dotCMS server to download a large file. If done repeatedly, this will result in Tomcat request-thread exhaustion and ultimately a denial of any other requests.

  • Published: Feb 2, 2023
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-37034
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWEs:

Software From Fixed in
dotcms / dotcms - 21.06.12
dotcms / dotcms 22.03 22.03.4
dotcms / dotcms 5.2.0 22.10