CVE-2020-22550 — HIGH (7.5)

Vulnerability Description

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Veno File Manager Project	Veno File Manager	3.5.6

Related Weaknesses (CWE)

CWE-22

References

https://codecanyon.net/item/veno-file-manager-host-and-share-files/6114247ProductThird Party Advisory
https://gist.github.com/Sp3eD-X/22640377f96340544baf12891f708b8fExploitThird Party Advisory
https://codecanyon.net/item/veno-file-manager-host-and-share-files/6114247ProductThird Party Advisory
https://gist.github.com/Sp3eD-X/22640377f96340544baf12891f708b8fExploitThird Party Advisory

FAQ

What is CVE-2020-22550?

CVE-2020-22550 is a vulnerability with a CVSS score of 7.5 (HIGH). Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server.

How severe is CVE-2020-22550?

CVE-2020-22550 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-22550?

Check the references section above for vendor advisories and patch information. Affected products include: Veno File Manager Project Veno File Manager.