VULNERABILITY INTELLIGENCE

CVE-2020-7867

CVSS score8 HIGH
EPSS probability0.81%
CISA KEVNot currently listed
Published2021-10-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.

Weakness classification

  • vuln@krcert.or.kr: CWE-20
  • nvd@nist.gov: CWE-20

Primary references