CVE-2020-9013

Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2020-02-16

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Skillpipe (Arvato)

References

• https://twitter.com/GerardFuguet/status/1228462263188758529
• https://www.exploit-db.com/docs/48175
• https://www.youtube.com/watch?v=Ok1UmRFWoLY