CVE-2020-27191

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File…

published November 16, 2020

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09595 · 95.5th percentile
Published
2020-11-16T15:17Z
EPSS history
Timeline
  • 16 NOV 15:17Z
    LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File…
    cvelistv5