Lucene search
MitreCVE-2020-27514HistoryAug 11, 2023 - 2:15 p.m.
CVE-2020-27514
2023-08-1114:15:10
CWE-22
mitre
web.nvd.nist.gov
8
cve-2020-27514
directory traversal
remote attack
zrlog
version 2.1.15
dos
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.003
Percentile
68.9%
Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service (DoS).
Affected configurations
Node
zrlogzrlogMatch2.1.5
References
Related
nvd
nvd
CVE-2020-27514
2023-08-11 14:15:10
prion
prion
Directory traversal
2023-08-11 14:15:00
cvelist
cvelist
CVE-2020-27514
2023-08-11 00:00:00
cnvd
cnvd
ZrLog Directory Traversal Vulnerability
2023-08-15 00:00:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.003
Percentile
68.9%
Related for CVE-2020-27514