CVE-2020-5640

CRITICAL 9.8CVE-2020-5640 · Published 20/10/2020 · updated 17/06/2026

In short

CVE-2020-5640 is a CRITICAL (CVSS 9.8) vulnerability affecting onethird (onethird).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
onethird onethird	`≤ 1.96c`	No fix yet

Description

Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors.

References

jvn.jp/en/vu/JVNVU99467898/index.html · Patch
onethird.net/en/p1340.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free