CVE-2020-14946

PoC ×2—

CVSS 3.1

4.3 medium

EPSS

8%p94

Published

Jun 22, 2020 (Jun 22, 2020)

Modified

Jun 17, 2026

Description

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files.

Vendors: globalradar
Products: bsa radar
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.7%)

In the news0 stories

No ingested article mentions this CVE yet.