CVE-2020-3979

Katalog CVE

CVSS 7.8 · High EPSS 0,38%

Kerentanan Uncontrolled Search Path Element pada installbuilder. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which could result in code execution with the security scope of the installer.

Rincian

Terbit di NVD

18 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 29,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://blog.installbuilder.com/2020/08/updates-and-bug-fixes-with-version-2070.html advisory vendor