CVE-2020-29071 Cross-site scripting in n/a
Attackers can execute arbitrary commands or read sensitive data via XSS in uploaded HTML attachments accessed directly.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-29071?
CVE-2020-29071 is a critical cross-site scripting vulnerability in n/a, published on 25 Nov 2020. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering of HTML files uploaded to the platform as attachments, when the -htmlview URL is directly accessed. The impact ranges from executing commands as root on the server to retrieving sensitive information about encrypted e-mails, depending on the permissions of the target user.
Weakness: CWE-79
Which versions are affected by CVE-2020-29071?
It affects 1 product.
Products include Liquidfiles Liquidfiles.
How do I fix CVE-2020-29071?
No fix has been published for CVE-2020-29071 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2020-29071 being exploited?
There is no known exploitation of CVE-2020-29071 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2025-46093 Privilege escalation in LiquidFiles
- CVE-2021-43397 LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.
- CVE-2025-56132 Information disclosure in n/a
- CVE-2020-29072 Information disclosure in n/a
- CVE-2023-4393 HTML and SMTP Injection in LiquidFiles
Sources
Also known as GHSA-6q9c-667c-xvww.