PT-2020-14120 · Gleamtech · Fileultimate

Chppppp · Published 2020-06-24 · Updated 2022-05-24 · CVE-2020-15015

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions GleamTech FileUltimate version 6.1.5.0 GleamTech FileUltimate version 6.1.5

Description The issue concerns the FileExplorer component, which is susceptible to XSS attacks when handling SVG documents.

Recommendations For version 6.1.5.0, update to a version that fixes this issue. For version 6.1.5, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-15015

GHSA-RRWX-8WM4-QHH4

Affected Products

Fileultimate

References · 5

• 🔥 https://gist.github.com/chppppp/9b003d8416e6d3a89d2873a58af2a95f · Exploit
• https://osv.dev/vulnerability/CVE-2020-15015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15015 · Security Note
• https://osv.dev/vulnerability/GHSA-rrwx-8wm4-qhh4 · Vendor Advisory
• https://github.com/GleamTech/FileUltimate · Note