Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2020-8985
HistoryMar 24, 2020 - 9:15 p.m.

CVE-2020-8985

2020-03-2421:15:15
CWE-352
CWE-79
mitre
web.nvd.nist.gov
24
zendto
cve-2020-8985
xss
csrf
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

31.5%

JSON

ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.

Affected configurations

Nvd
Node
zendzendtoMatch3.10
OR
zendzendtoMatch3.11
OR
zendzendtoMatch3.12
OR
zendzendtoMatch3.13
OR
zendzendtoMatch3.20
OR
zendzendtoMatch3.51
OR
zendzendtoMatch3.52
OR
zendzendtoMatch3.53
OR
zendzendtoMatch3.54
OR
zendzendtoMatch3.55
OR
zendzendtoMatch3.56-2
OR
zendzendtoMatch3.57
OR
zendzendtoMatch3.58
OR
zendzendtoMatch3.59
OR
zendzendtoMatch3.60
OR
zendzendtoMatch3.61
OR
zendzendtoMatch3.62
OR
zendzendtoMatch3.63
OR
zendzendtoMatch3.64
OR
zendzendtoMatch3.65
OR
zendzendtoMatch3.70-2
OR
zendzendtoMatch3.71
OR
zendzendtoMatch3.72
OR
zendzendtoMatch3.73
OR
zendzendtoMatch3.74
OR
zendzendtoMatch3.75
OR
zendzendtoMatch3.90
OR
zendzendtoMatch3.91
OR
zendzendtoMatch3.92
OR
zendzendtoMatch3.93
OR
zendzendtoMatch3.94
OR
zendzendtoMatch4.00
OR
zendzendtoMatch4.01
OR
zendzendtoMatch4.02
OR
zendzendtoMatch4.03-3
OR
zendzendtoMatch4.05-2
OR
zendzendtoMatch4.06-2
OR
zendzendtoMatch4.07-1
OR
zendzendtoMatch4.08-4
OR
zendzendtoMatch4.09-1
OR
zendzendtoMatch4.10-4
OR
zendzendtoMatch4.10-5
OR
zendzendtoMatch4.11-1
OR
zendzendtoMatch4.11-2
OR
zendzendtoMatch4.11-3
OR
zendzendtoMatch4.11-4
OR
zendzendtoMatch4.11-5
OR
zendzendtoMatch4.11-7
OR
zendzendtoMatch4.11-8
OR
zendzendtoMatch4.11-9
OR
zendzendtoMatch4.11-10
OR
zendzendtoMatch4.11-11
OR
zendzendtoMatch4.11-12
OR
zendzendtoMatch4.11-13
OR
zendzendtoMatch4.11-14
OR
zendzendtoMatch4.12-5
OR
zendzendtoMatch4.12-6
OR
zendzendtoMatch4.13-1
OR
zendzendtoMatch4.20-2
OR
zendzendtoMatch4.20-3
OR
zendzendtoMatch4.20-5
OR
zendzendtoMatch4.20-6
OR
zendzendtoMatch4.20-7
OR
zendzendtoMatch4.25-3
OR
zendzendtoMatch4.27-1
OR
zendzendtoMatch4.27-2
OR
zendzendtoMatch4.27-4
OR
zendzendtoMatch4.27-5
OR
zendzendtoMatch4.27-6
OR
zendzendtoMatch4.27-7
OR
zendzendtoMatch4.28-1
OR
zendzendtoMatch4.28-2
OR
zendzendtoMatch5.00-1
OR
zendzendtoMatch5.00-2
OR
zendzendtoMatch5.01-5
OR
zendzendtoMatch5.02-5
OR
zendzendtoMatch5.03-1
OR
zendzendtoMatch5.04-7
OR
zendzendtoMatch5.09-13
OR
zendzendtoMatch5.10-1
OR
zendzendtoMatch5.10-2
OR
zendzendtoMatch5.11-1
OR
zendzendtoMatch5.11-2
OR
zendzendtoMatch5.11-3
OR
zendzendtoMatch5.11-4
OR
zendzendtoMatch5.11-5
OR
zendzendtoMatch5.11-6
OR
zendzendtoMatch5.12-3beta
OR
zendzendtoMatch5.12-4beta
OR
zendzendtoMatch5.12-6beta
OR
zendzendtoMatch5.12-7beta
OR
zendzendtoMatch5.12-8beta
OR
zendzendtoMatch5.13-1
OR
zendzendtoMatch5.13-2
OR
zendzendtoMatch5.14-2beta
OR
zendzendtoMatch5.14-5beta
OR
zendzendtoMatch5.15-1
OR
zendzendtoMatch5.16-1beta
OR
zendzendtoMatch5.16-4beta
OR
zendzendtoMatch5.16-5beta
OR
zendzendtoMatch5.16-7beta
OR
zendzendtoMatch5.16-8beta
OR
zendzendtoMatch5.16.6beta
OR
zendzendtoMatch5.17-1
OR
zendzendtoMatch5.17-2
OR
zendzendtoMatch5.17-3
OR
zendzendtoMatch5.17-4
OR
zendzendtoMatch5.17-5beta
OR
zendzendtoMatch5.17-6
OR
zendzendtoMatch5.18-1beta
OR
zendzendtoMatch5.18-2beta
OR
zendzendtoMatch5.19-1production
OR
zendzendtoMatch5.20-1beta
OR
zendzendtoMatch5.20-2beta
OR
zendzendtoMatch5.20-3beta
OR
zendzendtoMatch5.20-5beta
OR
zendzendtoMatch5.20-6beta
OR
zendzendtoMatch5.20-7beta
OR
zendzendtoMatch5.20-8beta
OR
zendzendtoMatch5.20-9beta
OR
zendzendtoMatch5.21-1production
OR
zendzendtoMatch5.21-2production
OR
zendzendtoMatch5.22-1beta
VendorProductVersionCPE
zendzendto3.10cpe:2.3:a:zend:zendto:3.10:*:*:*:*:*:*:*
zendzendto3.11cpe:2.3:a:zend:zendto:3.11:*:*:*:*:*:*:*
zendzendto3.12cpe:2.3:a:zend:zendto:3.12:*:*:*:*:*:*:*
zendzendto3.13cpe:2.3:a:zend:zendto:3.13:*:*:*:*:*:*:*
zendzendto3.20cpe:2.3:a:zend:zendto:3.20:*:*:*:*:*:*:*
zendzendto3.51cpe:2.3:a:zend:zendto:3.51:*:*:*:*:*:*:*
zendzendto3.52cpe:2.3:a:zend:zendto:3.52:*:*:*:*:*:*:*
zendzendto3.53cpe:2.3:a:zend:zendto:3.53:*:*:*:*:*:*:*
zendzendto3.54cpe:2.3:a:zend:zendto:3.54:*:*:*:*:*:*:*
zendzendto3.55cpe:2.3:a:zend:zendto:3.55:*:*:*:*:*:*:*
Rows per page:
1-10 of 1231

Related

prion 1
nvd 1
cvelist 1
prion
prion
Design/Logic Flaw
2020-03-24 21:15:00
nvd
nvd
CVE-2020-8985
2020-03-24 21:15:15
cvelist
cvelist
CVE-2020-8985
2020-03-24 20:12:22

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

31.5%

JSON
Related for CVE-2020-8985
prion1nvd1cvelist1