Vulnerabilities > CVE-2017-20101 - Authorization Bypass Through User-Controlled Key vulnerability in Projectsend R754
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
SINGLE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |