CVE-2020-19360 - Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure

Back Back to CVE browser

HIGH

Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure

Published Jan 20, 2021

7.5

HIGH

CVSS 3.1

EPSS 17.28%

Description

Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

https://emreovunc.com/blog/en/FHEM-v6.0-LFI-Vulnerability-01.png
x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11264
Advisory
https://github.com/EmreOvunc/FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://emreovunc.com/blog/en/FHEM-v6.0-LFI-Vulnerability-01.png		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11264		Advisory
https://github.com/EmreOvunc/FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability		x_refsource_MISCExploitThird Party Advisory