CVE-2020-25247

Опубликовано: 11 сент. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.

Ссылки

http://seclists.org/fulldisclosure/2020/Oct/9
Mailing List
Third Party Advisory
https://seclists.org/fulldisclosure/2020/Sep/21
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Oct/9
Mailing List
Third Party Advisory
https://seclists.org/fulldisclosure/2020/Sep/21
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*

Версия до 18.0.0.32 (включая)

cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*

Версия от 19.0.0.0 (включая) до 19.8.9.1000 (включая)

EPSS

Процентиль: 69%

0.00604

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-53gm-2jx9-4jp3