CVE-2020-15929

Affected software: Ortus TestBox 2.4.0–4.1.0. Vulnerability: unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow writing an arbitrary CFM file within the application context, enabling Remote Code Execution. Root cause: unvalidated/unsafeguarded input in the HTMLRunne...