CVE-2020-7302

MEDIUM

DLP ePO extension - Unrestricted Upload of File with Dangerous Type

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2020-7302 has a selected CVSS score of 5.4 (medium).

Description

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

DLP ePO extension

Browse McAfee / DLP ePO extension
CVE List11.3 to < 11.3.28affected
11.4 to < 11.4.200affected
11.5 to < 11.5.3affected

References

2