Lucene search

K

MitreCVELIST:CVE-2020-35577

HistoryFeb 18, 2021 - 1:43 p.m.

CVE-2020-35577

2021-02-1813:43:31

mitre

www.cve.org

6

endalia selection portal

insecure direct object reference

file download

authentication

EPSS

0.001

Percentile

28.4%

In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier (aka CommonDownload identification number).

References

github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-35577

www.endalia.com/en/software/

EPSS

0.001

Percentile

28.4%

Related for CVELIST:CVE-2020-35577

prion1 nvd1 cve1