CVE-2020-5639

CRITICAL 9.8CVE-2020-5639 · Published 14/12/2020 · updated 17/06/2026

In short

CVE-2020-5639 is a CRITICAL (CVSS 9.8) vulnerability affecting filezen (soliton).
Chance of exploitation in the next 30 days (EPSS): 4.9%, higher than 92.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
filezen soliton	`≥ 3.0.0, ≤ 4.2.2`	No fix yet

Description

Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed.

References

jvn.jp/en/jp/JVN12884935/index.html · Third Party Advisory
jvn.jp/jp/JVN12884935/index.html · Third Party Advisory
soliton.co.jp/support/2020/004278.html · Vendor Advisory

More vulnerabilities in filezen

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

filezen

soliton

≥ 3.0.0, ≤ 4.2.2

No fix yet

More vulnerabilities in filezen

See all →