High severity7.5NVD Advisory· Published Sep 11, 2020· Updated Jun 17, 2026

CVE-2020-25247

Description

An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.

Affected products

Hyland/OnBasellm-fuzzy3 versions
18.0.0.32, 19.8.9.1000+ 2 more
- (no CPE)range: 18.0.0.32, 19.8.9.1000
- (no CPE)
- cpe:2.3:a:hyland:onbase:*:*:*:*:*:*:*:*range: <=18.0.0.32

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2020/Oct/9nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2020/Sep/21nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000