VULNERABILITY INTELLIGENCE

CVE-2020-23766

CVSS score6.5 MEDIUM

EPSS probability1.43%

CISA KEVNot currently listed

Published2021-05-21

Last modified2026-06-17

Description

An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges.