CVE-2020-36082

2023-08-1100:00:00

mitre

www.cve.org

file upload

bloofoxcms

vulnerability

remote attackers

arbitrary code

escalate privileges

webshell file

AI Score

Confidence

High

EPSS

0.004

Percentile

72.3%

JSON

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module.

References

github.com/alexlang24/bloofoxCMS/issues/7