CVE-2020-15734CWE-346

Same-origin policy vulnerability in Bitdefender Safepay

Medium · published April 12, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2021-04-12T16:50Z
EPSS history
Timeline
  • 12 APR 16:50Z
    Same-origin policy vulnerability in Bitdefender Safepay
    cvelistv5