CVE-2020-36639

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-36639
A vulnerability has been found in AlliedModders AMX Mod X on Windows and classified as critical. This vulnerability affects the function cmdVoteMap of the file plugins/adminvote.sma of the component Console Command Handler. The manipulation of the argument amx_votemap leads to path traversal. The patch is identified as a5f2b5539f6d61050b68df8b22ebb343a2862681. It is recommended to apply a patch to fix this issue. VDB-217354 is the identifier assigned to this vulnerability.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.7 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:L/Au:M/C:P/I:P/A:P

Exploitability : 4.1 / Impact : 6.4

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication MULTIPLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/alliedmodders/amxmodx/commit/a5f2b5539f6d61050b68df8b22ebb343a2862681 Patch
https://github.com/alliedmodders/amxmodx/pull/823 Patch
https://vuldb.com/?ctiid.217354 Third Party Advisory
https://vuldb.com/?id.217354 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:alliedmods:amx_mod_x:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

29 Feb 2024, 01:28

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en AlliedModders AMX Mod X en Windows y se clasificó como crítica. Esta vulnerabilidad afecta a la función cmdVoteMap del archivo plugins/adminvote.sma del componente Console Command Handler. La manipulación del argumento amx_votemap conduce a path traversal. El parche se identifica como a5f2b5539f6d61050b68df8b22ebb343a2862681. Se recomienda aplicar un parche para solucionar este problema. VDB-217354 es el identificador asignado a esta vulnerabilidad.

08 Dec 2023, 01:26

Type Values Removed Values Added
First Time Microsoft windows
Microsoft
CWE CWE-22
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

07 Nov 2023, 03:22

Type Values Removed Values Added
CWE CWE-22

20 Oct 2023, 14:15

Type Values Removed Values Added
CWE CWE-22
Summary A vulnerability has been found in AlliedModders AMX Mod X and classified as critical. This vulnerability affects the function cmdVoteMap of the file plugins/adminvote.sma of the component Console Command Handler. The manipulation of the argument amx_votemap leads to path traversal. The name of the patch is a5f2b5539f6d61050b68df8b22ebb343a2862681. It is recommended to apply a patch to fix this issue. VDB-217354 is the identifier assigned to this vulnerability. A vulnerability has been found in AlliedModders AMX Mod X on Windows and classified as critical. This vulnerability affects the function cmdVoteMap of the file plugins/adminvote.sma of the component Console Command Handler. The manipulation of the argument amx_votemap leads to path traversal. The patch is identified as a5f2b5539f6d61050b68df8b22ebb343a2862681. It is recommended to apply a patch to fix this issue. VDB-217354 is the identifier assigned to this vulnerability.

10 Jan 2023, 17:38

Type Values Removed Values Added
References (MISC) https://github.com/alliedmodders/amxmodx/commit/a5f2b5539f6d61050b68df8b22ebb343a2862681 - (MISC) https://github.com/alliedmodders/amxmodx/commit/a5f2b5539f6d61050b68df8b22ebb343a2862681 - Patch, Third Party Advisory
References (MISC) https://github.com/alliedmodders/amxmodx/pull/823 - (MISC) https://github.com/alliedmodders/amxmodx/pull/823 - Patch, Third Party Advisory
References (MISC) https://vuldb.com/?id.217354 - (MISC) https://vuldb.com/?id.217354 - Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.217354 - (MISC) https://vuldb.com/?ctiid.217354 - Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
First Time Alliedmods
Alliedmods amx Mod X
CPE cpe:2.3:a:alliedmods:amx_mod_x:*:*:*:*:*:*:*:*

04 Jan 2023, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-01-04 10:15

Updated : 2024-04-11 01:08

NVD link : CVE-2020-36639

Mitre link : CVE-2020-36639

CVE.ORG link : CVE-2020-36639

JSON object : View

Products Affected

microsoft

  • windows

alliedmods

  • amx_mod_x
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')