High severity7.5NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-25623

Description

Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if httpd in the inets application is used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Erlang/Erlang\/otp
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
Range: >=22.3.0,<22.3.4.6
Erlang/OTPdescription
Erlang/OTPllm-fuzzy
Range: <22.3.4.6, <23.1
osv-coords2 versions
pkg:rpm/opensuse/erlang&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/erlang27&distro=openSUSE%20Tumbleweed
< 24.0.5-2.1+ 1 more
- (no CPE)range: < 24.0.5-2.1
- (no CPE)range: < 27.1.3-1.1

Patches

Vulnerability mechanics

References

github.com/erlang/otp/releases/tag/OTP-23.1nvdRelease NotesThird Party Advisory
www.erlang.org/downloadsnvdRelease NotesVendor Advisory
www.erlang.org/newsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000