CVE-2020-19146

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the…

published September 15, 2021

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinal_cms/admin/folder/list'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01909 · 79.6th percentile
Published
2021-09-15T13:52Z
EPSS history
Timeline
  • 15 SEP 13:52Z
    Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the…
    cvelistv5