Skip to content
OpenAdvisories
Unscored CVE-2020-1853 EUVD-2020-12679GHSA-8g5w-xh3j-7w3x

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker…

Published Feb 17, 2020 · Updated Aug 4, 2024 · Assigned by huawei

Description

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage.

Affected products

VendorProductAffectedFixed
Huawei GaussDB 200 6.5.1 —

References