Lucene search

CVE-2020-28726

🗓️ 24 Nov 2020 17:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 27 Views🌐 WEB

Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Prion	Open redirect	24 Nov 202017:15	–	prion
CNVD	SeedDMS Open Redirect Vulnerability	25 Nov 202000:00	–	cnvd
NVD	CVE-2020-28726	24 Nov 202017:15	–	nvd
Cvelist	CVE-2020-28726	24 Nov 202016:45	–	cvelist

Nvd

Node

seeddms seeddmsMatch6.0.13

Source	Link
sourceforge	www.sourceforge.net/p/seeddms/code/ci/877844cbba0749367b8ba0e4e0bde34a1dc838f1/

Parameter	Position	Path	Description	CWE
dropfolderfileform1	query param	/out/out.AddDocument.php	Open redirect vulnerability allowing external URLs to be accessed via the dropfolderfileform1 parameter.	CWE-601

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Nov 2020 17:15Current

6.2Medium risk

Vulners AI Score6.2

CVSS25.8

CVSS36.1

EPSS0.002

CWE-601