CVE-2020-19878

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0

Description The issue is related to sensitive information leaks due to the lack of security access control in the "/dbhcms/ext/news/ext.news.be.php" API endpoint. A remote unauthenticated attacker can exploit this to obtain path information.

Recommendations For DBHcms version 1.2.0, consider restricting access to the "/dbhcms/ext/news/ext.news.be.php" endpoint until a patch is available. Additionally, review and implement proper security access controls to prevent similar issues.