CVE-2020-19360

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 17.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-01-20 · updated 2026-06-17
Weakness: CWE-22

Description

Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure.

Affected products

Fhem: 6.0

References

https://emreovunc.com/blog/en/FHEM-v6.0-LFI-Vulnerability-01.png
https://github.com/EmreOvunc/FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability
https://emreovunc.com/blog/en/FHEM-v6.0-LFI-Vulnerability-01.png
https://github.com/EmreOvunc/FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

Get alerted when CVE-2020-19360 or the next vulnerability affects your stack