CVE-2020-10800

lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data stream so that the Location header is…

published March 21, 2020

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data stream so that the Location header is associated with attacker-controlled executable content in the postDownload field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01365 · 71.6th percentile
Published
2020-03-21T14:06Z
EPSS history
Timeline
  • 21 MAR 14:06Z
    lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data stream so that the Location header is…
    cvelistv5