CVE-2020-23995

Medium

An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data…

mitre·CWE-209·Published 2021-05-13

CVSS

6.5

EPSS

0.02

KEV

Exploits

cve.orgen

168 chars

An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data path via a workspace upload.

NVDen

168 chars

An information disclosure vulnerability in ILIAS before 5.3.19, 5.4.12 and 6.0 allows remote authenticated attackers to get the upload data path via a workspace upload.

Una vulnerabilidad de divulgación de información en ILIAS antes de las versiones 5.3.19, 5.4.12 y 6.0 permite a los atacantes remotos autentificados obtener la ruta de datos de carga a través de una carga de espacio de trabajo

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N