Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-23765

Опубликовано: 21 мая 2021
Источник: nvd
CVSS3: 7.2
CVSS2: 6.5
EPSS Низкий

Описание

A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:bludit:bludit:3.12.0:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00378
Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

github
больше 3 лет назад

A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe plugins to upload a backup file and control the server.

EPSS

Процентиль: 59%
0.00378
Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434