CVE-2020-10560

An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permissions of the webserver. This can lead to further compromise. The attacker must conduct a brute-force attack against the SiteKey to insert into a crafted URL for components/OssnComments/ossn_com.php and/or libraries/ossn.lib.upgrade.php.

• CWE-338

• https://github.com/LucidUnicorn/CVE-2020-10560-Key-RecoveryThird Party Advisory
• https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-readExploit, Third Party Advisory
• https://github.com/LucidUnicorn/CVE-2020-10560-Key-RecoveryThird Party Advisory
• https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-readExploit, Third Party Advisory

Published

Mar 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10552An issue was discovered in Psyprax before 3.2.2. The Firebir…8.1
• CVE-2020-10553An issue was discovered in Psyprax before 3.2.2. The file %P…5.5
• CVE-2020-10554An issue was discovered in Psyprax beforee 3.2.2. Passwords …7.5
• CVE-2020-10557An issue was discovered in AContent through 1.4. It allows t…8.8
• CVE-2020-10558The driving interface of Tesla Model 3 vehicles in any relea…6.5
• CVE-2020-1056An elevation of privilege vulnerability exists when Microsof…8.1
• CVE-2020-10561An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3…9.8
• CVE-2020-10562An issue was discovered in DEVOME GRR before 3.4.1c. admin_e…7.2
• CVE-2020-10563An issue was discovered in DEVOME GRR before 3.4.1c. frmcont…9.8
• CVE-2020-10564An issue was discovered in the File Upload plugin before 4.1…9.8
• CVE-2020-10565grub2-bhyve, as used in FreeBSD bhyve before revision 525916…7.8
• CVE-2020-10566grub2-bhyve, as used in FreeBSD bhyve before revision 525916…7.8