CVE-2020-10236

An issue was discovered in Froxlor before 0.10.14

published March 9, 2020

CVSS
—
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

An issue was discovered in Froxlor before 0.10.14. It created files with static names in /tmp during installation if the installation directory was not writable. This allowed local attackers to cause DoS or disclose information out of the config files, because of _createUserdataConf in install/lib/class.FroxlorInstall.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Published
2020-03-09T15:04Z
EPSS history
Timeline
  • 09 MAR 15:04Z
    An issue was discovered in Froxlor before 0.10.14
    cvelistv5