CVE-2020-7849

8.8 highEPSS 1.4%

High (8.8) in uprism curix. EPSS 1.4% chance of exploitation in the next 30 days.

A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient input(server domain) validation. An attacker could exploit this vulnerability through crafted URL.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2021-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

uprism:curix

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35903
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35903

Check your stack JSON