CVE-2020-7857
20.04.2021, 20:15
A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: Tobesoft XPlatform versions prior to 9.2.2.280.
| Vendor | Product | Version |
|---|---|---|
| tobesoft | xplatform | 𝑥 < 9.2.2.280 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')The application uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.