Description

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.

Remediation

References

CVE-2017-20101

Related Vulnerabilities

WordPress Plugin WP Add Mime Types Cross-Site Request Forgery (2.2.1)

WordPress Plugin Best Image Gallery & Responsive Photo Gallery-FooGallery Cross-Site Scripting (1.4.31)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-8155)

PrestaShop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-39525)

MySQL CVE-2020-14869 Vulnerability (CVE-2020-14869)

Severity

Medium

Classification

CVE-2017-20101 CWE-639 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities