CVE-2020-35970

2021-06-0321:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read.

CPENameOperatorVersion
yzmcmseq5.3.0
yzmcmseq5.8

CPE	Name	Operator	Version
	yzmcms	eq	5.3.0
	yzmcms	eq	5.8

References

github.com/yzmcms/yzmcms/issues/53