high7.5
CVE-2020-20290
Directory traversal vulnerability in the yccms 3.3 project.
Impact
Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, triggers a directory traversal vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yccms | Yccms | Version 3.3 |