CVE-2020-15734

5.5 mediumEPSS 0.2%

Medium (5.5) in bitdefender safepay. EPSS 0.2% chance of exploitation in the next 30 days.

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-346
Published: 2021-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bitdefender:safepay

References

https://www.bitdefender.com/support/security-advisories/origin-policy-vulnerability-bitdefender-safepay/
https://www.bitdefender.com/support/security-advisories/origin-policy-vulnerability-bitdefender-safepay/

Check your stack JSON