Lucene search

K

MitreCVELIST:CVE-2020-35577

HistoryFeb 18, 2021 - 1:43 p.m.

CVE-2020-35577

2021-02-1813:43:31

mitre

www.cve.org

0.001 Low

EPSS

Percentile

28.6%

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier (aka CommonDownload identification number).

References

github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-35577

www.endalia.com/en/software/

0.001 Low

EPSS

Percentile

28.6%

Related for CVELIST:CVE-2020-35577

prion1 nvd1 cve1