DLL Hijacking Vulnerability in Seafile Client by Haiwen
CVE-2020-16143

7.8HIGH

Key Information:

Vendor

Seafile

Status
Seafile-client
Vendor
CVE Published:
29 July 2020

What is CVE-2020-16143?

The Seafile Client version 7.0.8 developed by Haiwen is susceptible to a DLL hijacking vulnerability due to its method of loading the exchndl.dll file from the current working directory. This behavior can be exploited by an attacker, allowing them to execute malicious code and compromise the security of the user's system. Users of Seafile Client are advised to be aware of this vulnerability and take necessary precautions.

References

https://github.com/haiwen/seafile-client/issues/1309
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.