CVE-2020-36884
Last modified
CVE-2020-36884 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forcing the application to make arbitrary HTTP requests to internal network hosts.. EPSS estimates a 0.83% chance of exploitation in the next 30 days.
Description
BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forcing the application to make arbitrary HTTP requests to internal network hosts.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2020-36884?
How severe is CVE-2020-36884?
How do I fix CVE-2020-36884?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-36879Flexsense DiskBoss 11.7.28 allows unauthenticated attackers …8.5
- CVE-2020-3688Possible buffer overflow while parsing mp4 clip with corrupt…9.8
- CVE-2020-36880Flexsense DiskBoss 7.7.14 contains a local buffer overflow v…7.8
- CVE-2020-36881Flexsense DiskBoss 7.7.14 contains a local buffer overflow v…7.8
- CVE-2020-36882Flexsense DiskBoss 7.7.14 allows unauthenticated attackers t…7.5
- CVE-2020-36883SpinetiX Fusion Digital Signage 3.4.8 and lower contains an …8.1
- CVE-2020-36885Sony IPELA Network Camera 1.82.01 contains a stack buffer ov…9.8
- CVE-2020-36886SpinetiX Fusion Digital Signage 3.4.8 contains a cross-site …8.8
- CVE-2020-36887SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenti…7.5
- CVE-2020-36888SpinetiX Fusion Digital Signage 3.4.8 contains a username en…5.3
- CVE-2020-36889A stored cross-site scripting vulnerability in Kentico Xperi…5.4
- CVE-2020-36890An access control bypass vulnerability in Kentico Xperience …8.6
Are you affected by CVE-2020-36884?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST