CVE-2020-23766

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-23766
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-23766.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-23766
Published
2021-05-21T18:15:07.923Z
Modified
2026-08-07T15:14:04.989194Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
Summary
[none]
Details

An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileges.

References

Affected packages

Git / github.com/danpros/htmly

Affected ranges

Type
GIT
Repo
https://github.com/danpros/htmly
Events
Introduced
b1611d8c388553ef3cb36c9ae47116c7b7212ba8
Last affected
b1611d8c388553ef3cb36c9ae47116c7b7212ba8
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:htmly:htmly:2.7.5:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "2.7.5"
        },
        {
            "last_affected": "2.7.5"
        }
    ]
}

Affected versions

2.*
2.7.5
v2.*
v2.7.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-23766.json"