Lucene search
K

CVE-2020-29600

🗓️ 07 Dec 2020 19:52:14Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 119 Views🌐 WEB

AWStats through 7.7, cgi-bin/awstats.pl?config= accepts absolute pathnam

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
AlpineLinux
CVE-2020-29600
7 Dec 202019:52
alpinelinux
Circl
CVE-2020-29600
7 Dec 202022:30
circl
CNNVD
Eldy Awstats Path Traversal Vulnerability
7 Dec 202000:00
cnnvd
Cvelist
CVE-2020-29600
7 Dec 202019:52
cvelist
Debian
[SECURITY] [DLA 2506-1] awstats security update
23 Dec 202015:18
debian
Debian CVE
CVE-2020-29600
7 Dec 202019:52
debiancve
Tenable Nessus
Debian DLA-2506-1 : awstats security update
24 Dec 202000:00
nessus
Tenable Nessus
Fedora 32 : awstats (2020-d1aa0e030c)
11 Jan 202100:00
nessus
Tenable Nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : AWStats vulnerabilities (USN-4953-1)
14 May 202100:00
nessus
EUVD
EUVD-2020-21961
7 Oct 202500:30
euvd
Rows per page
NVD
Node
awstatsawstatsRange7.7
Node
ParameterPositionPathDescriptionCWE
configquery paramcgi-bin/awstats.pl?config=Absolute pathname in the config parameter allows including files outside the intended /etc/awstats/awstats.conf path, enabling potential file disclosure.CWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:11Current
7High risk
Vulners AI Score7
CVSS 27.5
CVSS 3.19.8
EPSS0.02909
119