Lucene search

K
nvd[email protected]NVD:CVE-2020-36767
HistoryOct 30, 2023 - 7:15 p.m.

CVE-2020-36767

2023-10-3019:15:07
web.nvd.nist.gov
1
tinyfiledialogs
cve-2020-36767
metacharacters
security

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

8.7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input data.

Affected configurations

NVD
Node
linuxlinux_kernelMatch-
AND
vareilletinyfiledialogsRange<3.8.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

8.7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

Related for NVD:CVE-2020-36767