Medium severity6.5NVD Advisory· Published Dec 18, 2020· Updated Jun 17, 2026

CVE-2020-17520

Description

In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verification mechanism by constructing special URLs, thereby accessing any HTTP API.

Affected products

Pulsar manager/Pulsar managerdescription
Apache/Pulsar Manager2 versions
cpe:2.3:a:apache:pulsar_manager:0.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:pulsar_manager:0.1.0:*:*:*:*:*:*:*
- (no CPE)range: 0.1.0

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/rb8b3025f8b507dec0b66791df408cdaf2d155866db1c7a1a4bc621cd%40%3Cdev.pulsar.apache.org%3EnvdMailing ListVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000