CVE-2020-29134
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 27%
exploitation probability
27%top 2% of all CVEs
observed exploitation
nono source reports it
The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4
Affected products
n/a · n/a