high7.5
CVE-2020-13894
handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
Impact
handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dext5 | Dext5 | through 3.5.1402961 |