CVE-2020-25351

An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6

published August 20, 2021

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote authenticated attackers to read files on the system via a crafted request sent to to the /lib/crud/configcompare.crud.php script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01122 · 65.9th percentile
Published
2021-08-20T18:10Z
EPSS history
Timeline
  • 20 AUG 18:10Z
    An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6
    cvelistv5