CVE-2020-36772 - AskarLabs CVE Database

CVE-2020-36772

Vendor Cloudlinux Os

Product cagefs

Weakness CWE-73

Published January 22, 2024

Last update May 30, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.

Key dates

02Disclosure timeline

January 22, 2024 CVE published

May 30, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-36772 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/73.html

Related vulnerabilities

04Related CVE

CVE-2023-5816 Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading CVE-2023-6618 SourceCodester Simple Student Attendance System index.php file inclusion CVE-2026-33354 AVideo has an authenticated arbitrary local file read via `chunkFile` path injection in `aVideoEncoder.json.php` CVE-2025-3812 WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2020-2008 PAN-OS: OS command injection or arbitrary file deletion vulnerability