Unrated severityNVD Advisory· Published Aug 13, 2020· Updated Aug 4, 2024

DLP ePO extension - Unrestricted Upload of File with Dangerous Type

CVE-2020-7302

Description

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

Affected products

McAfee/Data Loss Prevention (DLP) ePO extensionllm-fuzzy
Range: <11.5.3
McAfee/DLP ePO extensionv5
Range: 11.3

Patches

Vulnerability mechanics

References

kc.mcafee.com/corporate/indexmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000