CVE-2020-7882CWE-24

anySign directory traversal vulnerability

High · published November 22, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01301 · 70.2th percentile
Weakness
CWE-24 · Path Traversal: '../filedir'
Published
2021-11-22T14:43Z
EPSS history
Timeline
  • 22 NOV 14:43Z
    anySign directory traversal vulnerability
    cvelistv5