CVE-2020-24137

2021-04-0716:15:13

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php.

CPENameOperatorVersion
wcmseq1.1.3
wcmseq0.1.6
wcmseq0.2.6
wcmseq0.1.3
wcmseq0.3.0
wcmseq0.1.1
wcmseq0.1.5
wcmseq0.1.2
wcmseq0.1.2.1
wcmseq0.2.2

Name	Operator	Version
wcms	eq	1.1.3
wcms	eq	0.1.6
wcms	eq	0.2.6
wcms	eq	0.1.3
wcms	eq	0.3.0
wcms	eq	0.1.1
wcms	eq	0.1.5
wcms	eq	0.1.2
wcms	eq	0.1.2.1
wcms	eq	0.2.2

Rows per page:

1-10 of 331

References

github.com/secwx/research/blob/main/cve/CVE-2020-24137.md

github.com/vedees/wcms/issues/7