VULNERABILITY INTELLIGENCE

CVE-2020-7875

CVSS score7.5 HIGH
EPSS probability0.63%
CISA KEVNot currently listed
Published2021-10-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

Weakness classification

  • vuln@krcert.or.kr: CWE-494
  • nvd@nist.gov: CWE-494

Primary references