CVE-2020-20670: Malicious File Upload
Published Sep 13, 2021
·Updated
An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTML file.
Affected Software
1 affected component
ZKEA ZKEACMS=3.2.0
Event History
Sep 13, 2021
CVE Published
via MITRE·09:13 PM
Data Sourced
via MITRE·09:13 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-20670?
CVE-2020-20670 has a medium severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2020-20670?
To fix CVE-2020-20670, upgrade to a patched version of ZKEACMS that addresses the arbitrary file upload vulnerability.
3
What impact does CVE-2020-20670 have on ZKEACMS?
CVE-2020-20670 allows attackers to upload a malicious HTML file, potentially leading to remote code execution on the server.
4
Is CVE-2020-20670 present in versions other than 3.2.0?
CVE-2020-20670 specifically affects version 3.2.0 of ZKEACMS.
5
Who is affected by CVE-2020-20670?
Any user or organization utilizing ZKEACMS version 3.2.0 is at risk for CVE-2020-20670.