VULNERABILITY INTELLIGENCE

CVE-2020-11817

CVSS score9.8 CRITICAL

EPSS probability1.99%

CISA KEVNot currently listed

Published2020-04-27

Last modified2026-06-17

Description

In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs with the Maintenance Mode setting.