CVE-2019-20484

High

An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the…

mitre·CWE-425·Published 2021-01-05

CVSS

8.1

EPSS

0.01

KEV

Exploits

cve.orgen

192 chars

An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in.

NVDen

192 chars

An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in.

Se detectó un problema en Viki Vera versión 4.9.1.26180. Un usuario sin acceso a un proyecto puede descargar o cargar archivos del proyecto abriendo la URL del Proyecto directamente en el navegador después de iniciar sesión

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.5	8.0	4.9	AV:N/AC:L/Au:S/C:P/I:P/A:N
3.1	Primary	NVD	8.1	2.8	5.2	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N