CVE-2020-15026

Published June 24th, 2020

View on NVD ↗

CVSS v3

4.9

MEDIUM

CVSS v2

4

MEDIUM

Affected

1

PROJECT

Description

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php.

Simple, Fast, Secure, Flat-File CMS

GitHub

1.43K