CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used…

published January 7, 2022

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02166 · 82.1th percentile
Published
2022-01-07T06:02Z
EPSS history
Timeline
  • 07 JAN 06:02Z
    SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used…
    cvelistv5