Lucene search
PRIOn knowledge basePRION:CVE-2020-35284HistoryDec 26, 2020 - 6:15 a.m.
Directory traversal
2020-12-2606:15:00
PRIOn knowledge base
www.prio-n.com
2
0.005 Low
EPSS
Percentile
76.5%
Flamingo (aka FlamingoIM) through 2020-09-29 allows …/ directory traversal because the only ostensibly unpredictable part of a file-transfer request is an MD5 computation; however, this computation occurs on the client side, and the computation details can be easily determined because the product’s source code is available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flamingoim | eq | <= 2020929 |
References
Related
cve
cve
CVE-2020-35284
2020-12-26 06:15:12
cvelist
cvelist
CVE-2020-35284
2020-12-26 05:31:42
nvd
nvd
CVE-2020-35284
2020-12-26 06:15:12