Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7815 EUVD-2020-28747GHSA-jqqm-9jx4-qr2h

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to …

Published Jul 10, 2020 · Updated Sep 17, 2024 · Assigned by krcert

Description

XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execution. File download vulnerability in ____COMPONENT____ of TOBESOFT XPLATFORM allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: TOBESOFT XPLATFORM 9.2.250 versions prior to 9.2.260 on Windows.

Affected products

VendorProductAffectedFixed
TOBESOFT XPLATFORM 9.2.250 – < 9.2.260 9.2.260

References