CVE-2017-20101 ProjectSend information disclosure
MediumCVSS 5.7
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| projectsend | = r754 | No fix listed |
References
- seclists.org exploit mailing-list third-party-advisory
- vuldb.com third-party-advisory
- youtu.be exploit third-party-advisory