CVE-2020-22623
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jul 27, 2023
Updated: Nov 7, 2023
CWE ID 22
Summary
CVE-2020-22623 is a directory traversal vulnerability affecting Jinfonet JReport 15.6. This issue allows unauthenticated attackers to access sensitive information by manipulating the file path input. An attacker can potentially read files outside of the intended directory, leading to a potential data breach. The vulnerability could be exploited remotely, making it a serious security concern for organizations using JReport 15.6. It is recommended that users upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- insightsoftware Inc.