CVE-2020-27466: High severity rconfig vulnerability
Published Aug 20, 2021
·Updated
An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file.
Affected Software
1 affected component
rConfig rConfig=3.9.6
Event History
Aug 20, 2021
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-27466.
2
What is the title of this vulnerability?
The title of this vulnerability is 'An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file.'
3
What is the severity of CVE-2020-27466?
The severity of CVE-2020-27466 is high.
4
How does CVE-2020-27466 impact rConfig?
CVE-2020-27466 allows attackers to execute arbitrary code on rConfig 3.9.6.
5
How can I fix CVE-2020-27466?
Update rConfig to version 3.9.7 or higher to mitigate the vulnerability.