CVE-2020-25414

2021-06-1714:21:36

mitre

www.cve.org

file inclusion

monstra

remote attack

arbitrary code execution

AI Score

9.6

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code.

References

github.com/monstra-cms/monstra/issues/469