CVE-2020-26166
Last modified
CVE-2020-26166 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. The file upload functionality in qdPM 9.1 doesn't check the file description, which allows remote authenticated attackers to inject web script or HTML via the attachments info parameter, aka XSS. This can occur during creation of a ticket, project, or task.. EPSS estimates a 0.84% chance of exploitation in the next 30 days.
Description
The file upload functionality in qdPM 9.1 doesn't check the file description, which allows remote authenticated attackers to inject web script or HTML via the attachments info parameter, aka XSS. This can occur during creation of a ticket, project, or task.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qdpm | Qdpm | 9.1 |
References
- http://qdpm.net/qdpm-release-notes-free-project-managementRelease Notes, Vendor Advisory
- https://github.com/Kajmer/CVEs/blob/main/CVE-2020-26166.mdThird Party Advisory
- https://sourceforge.net/projects/qdpm/Product, Third Party Advisory
- http://qdpm.net/qdpm-release-notes-free-project-managementRelease Notes, Vendor Advisory
- https://github.com/Kajmer/CVEs/blob/main/CVE-2020-26166.mdThird Party Advisory
- https://sourceforge.net/projects/qdpm/Product, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-26166?
How severe is CVE-2020-26166?
How do I fix CVE-2020-26166?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-26160jwt-go before 4.0.0-preview1 allows attackers to bypass inte…7.5
- CVE-2020-26161In Octopus Deploy through 2020.4.2, an attacker could redire…6.1
- CVE-2020-26162Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 …6.1
- CVE-2020-26163BigBlueButton Greenlight before 2.5.6 allows HTTP header (Ho…8.8
- CVE-2020-26164In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attac…5.5
- CVE-2020-26165qdPM through 9.1 allows PHP Object Injection via timeReportA…8.8
- CVE-2020-26167In FUEL CMS 11.4.12 and before, the page preview feature all…9.8
- CVE-2020-26168The LDAP authentication method in LdapLoginModule in Hazelca…9.8
- CVE-2020-2617Vulnerability in the Enterprise Manager Base Platform produc…6
- CVE-2020-26171In tangro Business Workflow before 1.18.1, the documentId of…4.3
- CVE-2020-26172Every login in tangro Business Workflow before 1.18.1 genera…6.5
- CVE-2020-26173An incorrect access control implementation in Tangro Busines…4.3
Are you affected by CVE-2020-26166?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST