CVE-2020-13924

PoC —

CVSS 3.1

7.5 high

EPSS

4%p90

Published

Mar 17, 2021 (Mar 17, 2021)

Modified

Jun 17, 2026

Description

In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files.

Vendors: apache
Products: ambari
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news0 stories

No ingested article mentions this CVE yet.