PT-2020-12787
CVE-2020-11700
·
تاريخ النشر
2020-09-17
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SpamTitan version 7.07
Description
An issue was discovered where improper sanitization of the parameter
fname, used on the page "certs-x.php", would allow an attacker to retrieve the contents of arbitrary files, but the user has to be authenticated before interacting with this page.Recommendations
For SpamTitan version 7.07, consider restricting access to the "certs-x.php" page until a fix is available, and avoid using the parameter
fname in this context to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾