Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-20354
HistoryJan 06, 2020 - 6:15 a.m.

Path traversal

2020-01-0606:15:00
PRIOn knowledge base
www.prio-n.com
2

4.6 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user) to download arbitrary files from the Raspberry Pi via api/settings/log?file=…/ path traversal. In other words, this issue is in the player API for log download.

CPENameOperatorVersion
pisignagelt2.6.4

4.6 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%