CVE-2020-25248: Path Traversal
An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Directory traversal exists for reading files, as demonstrated by the FileName parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25248?
CVE-2020-25248 is considered a moderate severity vulnerability.
How do I fix CVE-2020-25248?
To fix CVE-2020-25248, users should upgrade Hyland OnBase to versions above the affected thresholds mentioned in the vulnerability description.
What types of systems are affected by CVE-2020-25248?
CVE-2020-25248 affects multiple versions of Hyland OnBase, specifically those up to version 16.0.2.83 and all specified versions of 17.x, 18.x, 19.x, and 20.x.
What kind of attack does CVE-2020-25248 enable?
CVE-2020-25248 allows for directory traversal attacks, which can be exploited to read arbitrary files on the server.
Is CVE-2020-25248 being actively exploited?
As of now, there have been indications of exploitation attempts for CVE-2020-25248, emphasizing the need for timely remediation.