CVE-2020-12854

A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11

published July 15, 2020

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02975 · 87.2th percentile
Published
2020-07-15T19:04Z
EPSS history
Timeline
  • 15 JUL 19:04Z
    A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11
    cvelistv5