CVE-2020-20907

2021-05-2418:03:26

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.2%

JSON

MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.class.php and app/system/include/function/file.func.php.

References

cwe.mitre.org/data/definitions/23.html

github.com/cby234/cve_request/issues/1

github.com/cby234/cve_request/issues/2