PT-2020-19812
CVE-2020-7815
·
Published
2020-07-10
·
Updated
2021-07-21
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TOBESOFT XPLATFORM versions prior to 9.2.260
Description
The issue allows remote files to be downloaded by setting the arguments to a vulnerable method, which can be leveraged for code execution. This is a file download vulnerability that enables an attacker to cause impact.
Recommendations
For TOBESOFT XPLATFORM versions prior to 9.2.260, update to version 9.2.260 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾