CVE-2020-20907

Опубликовано: 24 мая 2021

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.

Ссылки

https://cwe.mitre.org/data/definitions/23.html
Third Party Advisory
https://github.com/cby234/cve_request/issues/1
Exploit
Issue Tracking
Third Party Advisory
https://github.com/cby234/cve_request/issues/2
Exploit
Issue Tracking
Third Party Advisory
https://cwe.mitre.org/data/definitions/23.html
Third Party Advisory
https://github.com/cby234/cve_request/issues/1
Exploit
Issue Tracking
Third Party Advisory
https://github.com/cby234/cve_request/issues/2
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:metinfo:metinfo:7.0.0:beta:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00883

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-rg63-9x4c-c4w9