CVE-2020-35577

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the…

published February 18, 2021

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier (aka CommonDownload identification number).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01007 · 62.7th percentile
Published
2021-02-18T13:43Z
EPSS history
Timeline
  • 18 FEB 13:43Z
    In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the…
    cvelistv5