CVE-2020-7832

CRITICAL 9.8CVE-2020-7832 · Published 07/09/2021 · updated 17/06/2026

In short

CVE-2020-7832 is a CRITICAL (CVSS 9.8) vulnerability affecting dext5 (dext5).
Chance of exploitation in the next 30 days (EPSS): 0.95%, higher than 61.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dext5 dext5	`≤ 5.0.0.117`	No fix yet

Description

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.(CVE-2020-7832)

References

boho.or.kr/krcert/secNoticeView.do · Third Party Advisory

More vulnerabilities in dext5

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free