CVE-2020-26806
Last modified
CVE-2020-26806 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory traversal and fileContent can be valid JSP code.. EPSS estimates a 5.97% chance of exploitation in the next 30 days.
Description
admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory traversal and fileContent can be valid JSP code.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Objectplanet | Opinio | < 7.15 |
References
- https://packetstormsecurity.com/files/163709/ObjectPlanet-Opinio-7.13-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
- https://www.objectplanet.com/opinio/changelog.htmlRelease Notes, Vendor Advisory
- https://packetstormsecurity.com/files/163709/ObjectPlanet-Opinio-7.13-Shell-Upload.htmlExploit, Third Party Advisory, VDB Entry
- https://www.objectplanet.com/opinio/changelog.htmlRelease Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-26806?
How severe is CVE-2020-26806?
How do I fix CVE-2020-26806?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-26800A stack overflow vulnerability in Aleth Ethereum C++ client …5.5
- CVE-2020-26801A stored cross-site scripting (XSS) vulnerability was discov…5.4
- CVE-2020-26802forma.lms 2.3.0.2 is affected by Cross Site Request Forgery …8.8
- CVE-2020-26803In Sentrifugo 3.2, users can upload an image under "Assets -…8.8
- CVE-2020-26804In Sentrifugo 3.2, users can share an announcement under "Or…8.8
- CVE-2020-26805In Sentrifugo 3.2, admin can edit employee's informations vi…7.2
- CVE-2020-26807SAP ERP Client for E-Bilanz, version - 1.0, installation set…3.3
- CVE-2020-26808SAP AS ABAP(DMIS), versions - 2011_1_620, 2011_1_640, 2011_1…7.2
- CVE-2020-26809SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an…5.3
- CVE-2020-2681Vulnerability in the Oracle VM VirtualBox product of Oracle …6.5
- CVE-2020-26810SAP Commerce Cloud (Accelerator Payment Mock), versions - 18…7.5
- CVE-2020-26811SAP Commerce Cloud (Accelerator Payment Mock), versions - 18…5.3
Are you affected by CVE-2020-26806?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST