CVE-2020-23715

Name of the Vulnerable Software and Affected Versions Webport CMS version 1.19.10.17121

Description The issue is related to a Directory Traversal vulnerability. It can be exploited via the file parameter to the "file/download" endpoint.

Recommendations For Webport CMS version 1.19.10.17121, as a temporary workaround, consider restricting access to the "file/download" endpoint until a patch is available. Avoid using the file parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.