CVE-2020-25850

HGiga MailSherlock - Arbitrary File Download

High · published December 31, 2020

CVSS v3.1
8.1
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01121 · 65.9th percentile
Published
2020-12-31T07:45Z
EPSS history
Timeline
  • 31 DEC 07:45Z
    HGiga MailSherlock - Arbitrary File Download
    cvelistv5