CVE-2020-7849CWE-20

UPRISM CURIX arbitrary code execution vulnerability

High · published February 17, 2021

CVSS v3.1
8.0
EPSS
1%
Percentile
71.5
In the wild
Unconfirmed
What it is

A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient input(server domain) validation. An attacker could exploit this vulnerability through crafted URL.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01361 · 71.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-02-17T13:25Z
EPSS history
Timeline
  • 17 FEB 13:25Z
    UPRISM CURIX arbitrary code execution vulnerability
    cvelistv5