CVE-2020-6142: Path Traversal

Published Sep 1, 2020

Updated

A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP request to trigger this vulnerability.

Affected Software

1 affected component

OS4ED openSIS=7.3

Event History

Sep 1, 2020

CVE Published

via MITRE·08:12 PM

Data Sourced

via MITRE·08:12 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-6142?

CVE-2020-6142 is a remote code execution vulnerability in the Modules.php functionality of OS4Ed openSIS 7.3.

How does CVE-2020-6142 affect OS4Ed OpenSIS?

CVE-2020-6142 allows for remote code execution and local file inclusion in OS4Ed openSIS 7.3 when a specially crafted HTTP request is sent.

What is the severity of CVE-2020-6142?

CVE-2020-6142 has a severity rating of critical, with a CVSS score of 9.8.

How can I fix CVE-2020-6142?

To fix CVE-2020-6142, it is recommended to update OS4Ed openSIS to the latest version or apply the relevant security patch provided by the vendor.

Where can I find more information about CVE-2020-6142?

More information about CVE-2020-6142 can be found at the following link: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1082