CVE-2020-19155

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the…

published September 15, 2021

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' function in the component 'modules/filemanager/FileManagerController.java'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07522 · 94.5th percentile
Published
2021-09-15T13:52Z
EPSS history
Timeline
  • 15 SEP 13:52Z
    Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the…
    cvelistv5