exploitDog

CVE-2020-8102

Опубликовано: 22 июн. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bitdefender:total_security_2020:*:*:*:*:*:*:*:*

Версия до 24.0.20.116 (исключая)

EPSS

Процентиль: 65%

0.00496

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

CWE-20

Связанные уязвимости

GHSA-frgh-7pf4-6v6f

github

больше 3 лет назад

Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.

EPSS

Процентиль: 65%

0.00496

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

CWE-20