CVE-2020-29600

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891469Exploit, Issue Tracking, Mailing List, Third Party Advisory
https://github.com/eldy/awstats/issues/90Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00035.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47QZWKSRZYZFESYTLSW7A6KVKOOPL7IV/
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891469Exploit, Issue Tracking, Mailing List, Third Party Advisory
https://github.com/eldy/awstats/issues/90Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/12/msg00035.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47QZWKSRZYZFESYTLSW7A6KVKOOPL7IV/

Timeline

Published: Dec 7, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-296019.8The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notary docker container d CVE-2020-296029.8The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user. System using the irssi docker CVE-2020-296034.3In manage_proj_edit_page.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects' names via the manage_CVE-2020-296046.5An issue was discovered in MantisBT before 2.24.4. A missing access check in bug_actiongroup.php allows an attacker (with rights to create n CVE-2020-296054.3An issue was discovered in MantisBT before 2.24.4. Due to insufficient access-level checks, any logged-in user allowed to perform Group Acti CVE-2020-296077.2A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through CVE-2020-296085.5An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catal CVE-2020-29619.8Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework (Oracle OHS)). Su CVE-2020-296105.5An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update CVE-2020-296117.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Upd CVE-2020-296127.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-00 CVE-2020-296135.5A logic issue was addressed with improved state management. This issue is fixed in iOS 14.3 and iPadOS 14.3. An enterprise application insta