Vulnerability Details CVE-2020-20290
Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, triggers a directory traversal vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 6.4
Products affected by CVE-2020-20290
-
cpe:2.3:a:yccms:yccms:3.3