Vulnerability · Published Jun 22, 2020 · Assigned by Bitdefender
CVE-2020-8102Insufficient URL sanitization and validation in Safepay Browser (VA-8631)
High 8.8
In plain English
A high-severity improper input validation in Bitdefender Total Security 2020 from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.1%top 35.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | Bitdefender Total Security 2020 | unspecified – before 24.0.20.116 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H