CRITICAL

CVE-2020-17564

CVSS v3

9.1

CRITICAL

EPSS Score

11.7%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component.

Technical details

Published
4/22/2021

Frequently asked questions

What is CVE-2020-17564?

Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component.

Is CVE-2020-17564 actively exploited?

Active exploitation of CVE-2020-17564 has not been confirmed. The EPSS score is 11.7%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-17564?

CVE-2020-17564 has a CVSS v3 base score of 9.1 (CRITICAL severity).

Is CVE-2020-17564 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.