CVE-2020-36639

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in AlliedModders AMX Mod X on Windows and classified as critical. This vulnerability affects the function cmdVoteMap of the file plugins/adminvote.sma of the component Console Command Handler. The manipulation of the argument amx_votemap leads to path traversal. The patch is identified as a5f2b5539f6d61050b68df8b22ebb343a2862681. It is recommended to apply a patch to fix this issue. VDB-217354 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
AlliedModders	AMX Mod X	n/a

References

https://github.com/alliedmodders/amxmodx/commit/a5f2b5539f6d61050b68df8b22ebb343a2862681Patch
https://github.com/alliedmodders/amxmodx/pull/823Patch
https://vuldb.com/?ctiid.217354Third Party Advisory
https://vuldb.com/?id.217354Third Party Advisory
https://github.com/alliedmodders/amxmodx/commit/a5f2b5539f6d61050b68df8b22ebb343a2862681Patch
https://github.com/alliedmodders/amxmodx/pull/823Patch
https://vuldb.com/?ctiid.217354Third Party Advisory
https://vuldb.com/?id.217354Third Party Advisory

Timeline

Published: Jan 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-36646.0Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Com CVE-2020-366409.8A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the func CVE-2020-366419.8A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser o CVE-2020-366429.8A vulnerability was found in trampgeek jobe up to 1.6.x and classified as critical. This issue affects the function run_in_sandbox of the fi CVE-2020-366446.1A vulnerability has been found in jamesmartin Inline SVG up to 1.7.1 and classified as problematic. Affected by this vulnerability is an unk CVE-2020-366459.8A vulnerability, which was classified as critical, was found in square squalor. This affects an unknown part. The manipulation leads to sql CVE-2020-366467.5A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Secon CVE-2020-366475.3A vulnerability classified as critical has been found in YunoHost-Apps transmission_ynh. Affected is an unknown function of the file conf/ng CVE-2020-366489.8A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the ar CVE-2020-366497.5A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file CVE-2020-36657.8A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of ra CVE-2020-366508.0A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulati