PT-2021-9803 · Bitdefender · Bitdefender Safepay

Narendra Bhati · Published 2021-04-12 · Updated 2021-04-21 · CVE-2020-15734

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bitdefender Safepay versions prior to 25.0.7.29

Description An Origin Validation Error issue allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories.

Recommendations For versions prior to 25.0.7.29, update to version 25.0.7.29 or later to resolve the issue.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2020-15734

Affected Products

Bitdefender Safepay

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-15734 · Security Note
• https://bitdefender.com/support/security-advisories/origin-policy-vulnerability-bitdefender-safepay · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15734 · Vendor Advisory
• https://t.me/cvenotify/13111 · Telegram Post