CVE-2020-8102CWE-20

Insufficient URL sanitization and validation in Safepay Browser (VA-8631)

High · published June 22, 2020

CVSS v3.1
8.8
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01070 · 64.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-06-22T09:35Z
EPSS history
Timeline
  • 22 JUN 09:35Z
    Insufficient URL sanitization and validation in Safepay Browser (VA-8631)
    cvelistv5