CVE-2020-15733CWE-346

URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)

Medium · published December 14, 2020

CVSS v3.1
6.5
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00573 · 46.6th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2020-12-14T17:05Z
EPSS history
Timeline
  • 14 DEC 17:05Z
    URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)
    cvelistv5