CVE-2017-20101

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.

Score

CVSS 3.1 5.7 Medium

Status

Modified - cna@vuldb.com

Published

2022-06-27

Last modified

2025-04-15

Weaknesses

CWE-200, CWE-639

Affected products

• Projectsend (Projectsend)
• Projectsend (Unspecified)

References

• http://seclists.org/fulldisclosure/2017/Feb/58
• https://vuldb.com/?id.97275
• https://youtu.be/Xc6Jg9I7Pj4