What is CVE-2020-7830?

CVE-2020-7830 is a high-severity vulnerability in Raonwiz Raon Kupload, classified under Improper Input Validation. CVSS score: 7.8/10. Published 2020-09-02.

How severe is CVE-2020-7830?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2020-7830 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Raonwiz Raon Kupload

CVE-2020-7830

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download paths. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.008 (54.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Raonwiz Raon Kupload — versions <=2018.0.2.50
Raonwiz Raon_kupload

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

404notf0und/CVE-Flow

References

vuln@krcert.or.kr (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7830?: CVE-2020-7830 is a high-severity vulnerability in Raonwiz Raon Kupload, classified under Improper Input Validation. CVSS score: 7.8/10. Published 2020-09-02.
How severe is CVE-2020-7830?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2020-7830 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.