system
Describe <CVE-2019-12872>.
user
What is <CVE-2019-12872>?
assistant
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp..