VULNERABILITY INTELLIGENCE

CVE-2020-7849

CVSS score8 HIGH
EPSS probability1.36%
CISA KEVNot currently listed
Published2021-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient input(server domain) validation. An attacker could exploit this vulnerability through crafted URL.

Weakness classification

  • vuln@krcert.or.kr: CWE-20
  • nvd@nist.gov: CWE-20

Primary references