VulnerabilityModified
CVE-2020-25359
An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6.
CRITICAL 9.1EPSS 2.25%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.25%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFiles.php by specifying a path in the path parameter and an extension in the ext parameter and delete all the files with that extension in that path.
- CVSS 3.1
- 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- EPSS
- 2.25% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-862
- Affected
- rconfig/rconfig
- Source
- cve@mitre.org
References
- https://cwe.mitre.org/data/definitions/36.htmlThird Party Advisory
- https://stark0de.com/2020/08/27/pwning-rconfig-part-one.htmlExploit, Third Party Advisory
- https://cwe.mitre.org/data/definitions/36.htmlThird Party Advisory
- https://stark0de.com/2020/08/27/pwning-rconfig-part-one.htmlExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.