medium6.5
CVE-2020-23069
Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.
Impact
Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webtareas Project | Webtareas | Version 2.0 |