CVE-2020-27993

Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files

published October 29, 2020

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02536 · 84.8th percentile
Published
2020-10-29T15:05Z
EPSS history
Timeline
  • 29 OCT 15:05Z
    Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files
    cvelistv5