Lucene search

MitreCVE-2020-19786

HistoryMar 23, 2023 - 8:15 p.m.

CVE-2020-19786

2023-03-2320:15:13

CWE-434

mitre

web.nvd.nist.gov

cve-2020-19786

file upload vulnerability

cskaza csz cms

security

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

31.0%

JSON

File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.

Affected configurations

Nvd

Node

cszcmscsz_cmsMatch1.2.2

VendorProductVersionCPE
cszcmscsz_cms1.2.2cpe:2.3:a:cszcms:csz_cms:1.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cszcms	csz_cms	1.2.2	cpe:2.3:a:cszcms:csz_cms:1.2.2:::::::*

References

github.com/cskaza/cszcms/issues/20

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

31.0%

JSON

Related for CVE-2020-19786