CVE-2020-23971

gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions

published September 1, 2020

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions. An attacker can access the upload function without authenticating to the application and also can upload files due the issues of unrestricted file uploads which can be bypassed by changing the content-type and name file too double extensions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01540 · 74.7th percentile
Published
2020-09-01T15:05Z
EPSS history
Timeline
  • 01 SEP 15:05Z
    gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions
    cvelistv5