未評価
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes...
CVE-2020-25790
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our security policy" and is being fixed for 5.2
参照URL
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory github.com
- report packetstormsecurity.com