CRITICAL

CVE-2020-17563

CVSS v3

9.1

CRITICAL

EPSS Score

11.7%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id=".

Technical details

Published
4/22/2021

Frequently asked questions

What is CVE-2020-17563?

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id=".

Is CVE-2020-17563 actively exploited?

Active exploitation of CVE-2020-17563 has not been confirmed. The EPSS score is 11.7%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-17563?

CVE-2020-17563 has a CVSS v3 base score of 9.1 (CRITICAL severity).

Is CVE-2020-17563 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.