CVE-2020-15733: URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-14 · updated 2026-06-17
Weakness: CWE-346

Description

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29.

Affected products

Bitdefender Antivirus Plus: before 25.0.7.29 — fixed in 25.0.7.29

How to fix

Upgrade to a fixed version: Bitdefender Antivirus Plus 25.0.7.29. Check the vendor advisory for mitigations.

References

https://www.bitdefender.com/support/security-advisories/url-spoofing-vulnerability-bitdefender-safepay-va-8958
https://www.bitdefender.com/support/security-advisories/url-spoofing-vulnerability-bitdefender-safepay-va-8958

Get alerted when CVE-2020-15733 or the next vulnerability affects your stack