CVE-2020-5616

calendar01 project calendar01, calendar02 project calendar02, calendarform01 project calendarform01 +5 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-5616

Katalog CVE

CVSS 9.8 · Critical EPSS 3,1%

Kerentanan Improper Authentication pada calendar01 project calendar01, calendar02 project calendar02 +6 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free edition ver1.0.3 and earlier, and [Link01] free edition ver1.0.0 allows remote attackers to bypass authentication and log in to the product with administrative privileges via unspecified vectors.

Rincian

Terbit di NVD
4 Agustus 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-287: Improper Authentication
EPSS (30 hari)
3,1% peluang dieksploitasi; lebih tinggi dari 87,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
calendar01 project calendar01 Versi 1.0.0
calendar02 project calendar02 Versi 1.0.0
calendarform01 project calendarform01 Semua versi hingga 1.0.3
gallery01 project gallery01 Semua versi hingga 1.0.3
link01 project link01 Versi 1.0.0
pkobo-news01 project pkobo-news01 Semua versi hingga 1.0.3
pkobo-vote01 project pkobo-vote01 Semua versi hingga 1.0.1
telop01 project telop01 Versi 1.0.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.