Researchers
Back
Piaox
Researcher from
Pingan Product Safety Group
#59255
of 60,574
4
Total CVSS
Vulnerabilities
·
1
PT-2016-5784
2016-04-18
4.0
CVE-2016-3972
Dotcms
Dotcms
The issue allows remote authenticated administrators to read arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the dotTailLogServlet, specifically by using a .. (dot dot) in the `fileName` parameter.