CVE-2020-15026

2020-06-2419:15:10

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.5%

JSON

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=…/ directory traversal approach for arbitrary file download via backup/plugin.php.

CPENameOperatorVersion
bluditeq2.3-beta-2
bluditeq0.1
bluditeq1.4a
bluditeq3.0.0-alpha-4
bluditeq0.5
bluditeq3.8.0
bluditeq3.11.0
bluditeq1.0.1
bluditeq1.5.1
bluditeq3.0.0-rc-3

Name	Operator	Version
bludit	eq	2.3-beta-2
bludit	eq	0.1
bludit	eq	1.4a
bludit	eq	3.0.0-alpha-4
bludit	eq	0.5
bludit	eq	3.8.0
bludit	eq	3.11.0
bludit	eq	1.0.1
bludit	eq	1.5.1
bludit	eq	3.0.0-rc-3

Rows per page:

1-10 of 881

References

github.com/bludit/bludit/issues/1214