CVE-2020-17385

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system...

CVE-2020-17385

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system...

CVE-2020-17385

Affected software: Cellopoint CelloOS v4.1.10 Build 20190922. Issue: improper validation of URL input enables a Path Traversal attack to access arbitrary files on the system (CVE-2020-17385). Severity: CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, privileges NONE, no user interaction. Pu...

CVE-2020-17385 Cellopoint CelloOS - Unauthenticated Arbitrary File Disclosure

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system...