Unrated severityNVD Advisory· Published Mar 17, 2021· Updated Feb 13, 2025

CVE-2020-13924

Description

In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files.

Affected products

Apache/Ambarillm-fuzzy
Range: <=2.6.2.2
Apache Software Foundation/Apache Ambariv5
Range: Apache Ambari

Patches

Vulnerability mechanics

References

mail-archives.apache.org/mod_mbox/ambari-user/202102.mbox/%3CCAEJYuxEQZ_aPwJdAaSxPu-Dva%3Dhc7zZUx3-pzBORbd23g%2BGH1A%40mail.gmail.com%3Emitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000