CVE-2018-17422

MEDIUM 6.1CVE-2018-17422 · Published 07/03/2019 · updated 17/06/2026

In short

CVE-2018-17422 is a MEDIUM (CVSS 6.1) vulnerability affecting dotcms (dotcms).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.8% of all vulnerabilities.
Fix: update to 5.0.2 or later.

Package	Affected versions	Patched versions
dotcms dotcms	`< 5.0.2`	`5.0.2`

Description

dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter.

References

dotCMS/core · Exploit

More vulnerabilities in dotcms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dotcms

< 5.0.2

5.0.2

More vulnerabilities in dotcms

See all →