CVE-2020-24137

2021-04-0715:05:46

mitre

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php.

References

github.com/secwx/research/blob/main/cve/CVE-2020-24137.md

github.com/vedees/wcms/issues/7