CVE-2020-7858

MEDIUM · CVSS 6.8 EPSS 1.06%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-04-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-7858

Severity

MEDIUM

CVSS

6.8

EPSS

1.06%

Original NVD Description

There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to view host file on the system. This vulnerability can cause information leakage.