CVE-2020-35362

DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp

published December 26, 2020

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow remote files to be downloaded via a dext5CMD=downloadRequest action with traversal in the fileVirtualPath parameter (the attacker must provide the correct fileOrgName value).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01637 · 76.2th percentile
Published
2020-12-26T05:19Z
EPSS history
Timeline
  • 26 DEC 05:19Z
    DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp
    cvelistv5