Bigtreecms

Records45All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Bigtreecms records in CISA KEV

No Bigtreecms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Bigtree · all components

TI-2018-14457 CVE-2018-20405 · GHSA-qggm-xmg7-pqpf

MEDIUM 47

BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00822 Published 2018-12-23 No fix listed CWE-639