Directory Traversal Vulnerability in FileZen by Soliton Systems
CVE-2020-5639

9.8CRITICAL

Key Information:

Status
Vendor
CVE Published:
14 December 2020

What is CVE-2020-5639?

A directory traversal vulnerability exists in the FileZen product, affecting versions from V3.0.0 to V4.2.2. This vulnerability allows remote attackers to exploit unspecified vectors to upload arbitrary files to a specific directory on the server. Consequently, this may lead to the execution of arbitrary operating system commands, posing significant security risks for affected systems.

Affected Version(s)

FileZen versions from V3.0.0 to V4.2.2

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.