Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2020-7849

UPRISM CURIX arbitrary code execution vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient input(server domain) validation. An attacker could exploit this vulnerability through crafted URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

uPrism.io CURIX 7.0 Agent

  • 1.3.6 to ≤ 1.3.6affected

References