low2.7
CVE-2020-35762
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.
Impact
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bloofox | Bloofoxcms | Version 0.5.2.1 |