CVE-2020-19275 Information disclosure in n/a
Attackers can trigger errors to leak physical file paths in dhcms, potentially aiding further attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-19275?
CVE-2020-19275 is a medium-severity vulnerability in n/a, published on 12 May 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path.
Weakness: CWE-209
Which versions are affected by CVE-2020-19275?
It affects 1 product.
Products include Dhcms Project Dhcms.
How do I fix CVE-2020-19275?
No fix has been published for CVE-2020-19275 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-19275 being exploited?
There is no known exploitation of CVE-2020-19275 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-pchj-m6qq-j4q5.