CVE-2020-17564

Name of the Vulnerable Software and Affected Versions: FeiFeiCMS version 4.0

Description: The issue allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the "Admin/DataAction.class.php" component. This is a result of a Path Traversal weakness.

Recommendations: For FeiFeiCMS version 4.0, as a temporary workaround, consider restricting access to the "Admin/DataAction.class.php" component until a patch is available. Avoid using this component to handle file deletion requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.