What’s Vulnerable › Vulnerabilities

CVE-2020-13227

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-06-02 · updated 2026-06-17
• Weakness: CWE-22

Description

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by triggering an invalid path permission error. This bypasses the fakepath protection mechanism.

Affected products

• Sysax Software Multi-Server: 6.90

References

• https://github.com/wrongsid3
• https://github.com/wrongsid3/Sysax-MultiServer-6.90-Multiple-Vulnerabilities/blob/master/README.md
• https://pasteboard.co/J9eF12G.png
• https://github.com/wrongsid3
• https://github.com/wrongsid3/Sysax-MultiServer-6.90-Multiple-Vulnerabilities/blob/master/README.md
• https://pasteboard.co/J9eF12G.png

Get alerted when CVE-2020-13227 or the next vulnerability affects your stack