PT-2020-15332

CVE-2020-21244

·

Published

2020-09-30

·

Updated

2020-10-14

Description by

CVSS 2.0
5.5
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions FrontAccounting version 2.4.7
Description An issue was discovered in FrontAccounting, which is a Directory Traversal vulnerability. This vulnerability can be exploited to empty a folder via the admin/inst lang.php endpoint. The estimated number of potentially affected devices worldwide is not available.
Recommendations For FrontAccounting version 2.4.7, as a temporary workaround, consider restricting access to the admin/inst lang.php endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2020-21244
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com