CVE-2020-10800

—

CVSS 3.1

8.1 high

EPSS

1%p70

Published

Mar 21, 2020 (Mar 21, 2020)

Modified

Jun 17, 2026

Description

lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data stream so that the Location header is associated with attacker-controlled executable content in the postDownload field.

Vendors: lix project
Products: lix
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.