CVE-2020-8102highCWE-20

CVE-2020-8102: high-severity vulnerability in Bitdefender Total Security 2020

Insufficient URL sanitization and validation in Safepay Browser (VA-8631)

Published · Updated

Follow this CVE+ Monitor Total Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.1%
Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Bitdefender · Bitdefender Total Security 2020
Related CVEs — Bitdefender Total Security 2020

In the same product, most dangerous first.

CVE-2020-8095MEDIUMBitdefender Total Security Link Resolution Denial-of-Service VulnerabilityEPSS 0.5%