CVE-2020-23768

2021-05-2117:11:47

mitre

www.cve.org

cve-2020-23768

alibaba

information disclosure

vulnerability

phppyun

personal information

AI Score

7.2

Confidence

High

EPSS

0.003

Percentile

71.2%

JSON

An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users’ personally identifiable information including e-mail address and telephone numbers.

References

github.com/whiskey-jj/w2s2x2222.github.io/issues/1