CVE-2020-29134

The TOTVS Fluig platform allows path traversal through the parameter "file = .

published March 5, 2021

CVSS
—
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27639 · 98.1th percentile
Published
2021-03-05T15:50Z
EPSS history
Timeline
  • 11 SEP 03:08Z
    EPSS moved 15% → 27%
    epss
  • 05 MAR 15:50Z
    The TOTVS Fluig platform allows path traversal through the parameter "file = .
    cvelistv5