VULNERABILITY INTELLIGENCE

CVE-2020-7858

CVSS score6.8 MEDIUM
EPSS probability1.06%
CISA KEVNot currently listed
Published2021-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Description

There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to view host file on the system. This vulnerability can cause information leakage.

Weakness classification

  • vuln@krcert.or.kr: CWE-548
  • nvd@nist.gov: CWE-22

Primary references