Vulnerability Intelligence Report
CVE-2020-36200
TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.
No Active Exploit Signals
CVSS Base Score
6.5
MEDIUM
EPSS Probability:0.79%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| kaspersky | tinycheck | all |
Threat Intelligence Signals
EPSS Score
0.788%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Kaspersky · Vendor · Russia |
| Reserved | 2021-01-20T00:00:00 |
| Published | 2021-01-21T21:23:00 |
| Last Updated | 2024-08-04T17:23:09 |
Community Chatter & Buzz