Description
Marvell QConvergeConsole GUI存在目录遍历漏洞，此漏洞是由于gwttestservice接口对用户提供的路径验证不当造成的。
Marvell QConvergeConsole GUI CVE-2020-5803 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.tenable.com/security/research/tra-2020-56
https://nvd.nist.gov/vuln/detail/CVE-2020-5803
https://access.redhat.com/security/cve/cve-2020-5803
https://www.marvell.com/content/dam/marvell/en/public-collateral/ethernet-adaptersandcontrollers/marvell-ethernet-controllers-security-advisory-2022-01.pdf
https://strobes.co/vi/cve/CVE-2020-5803
https://feedly.com/cve/CVE-2020-5803
https://vulnerability.circl.lu/vuln/cve-2020-5803
https://vulmon.com/searchpage?q=Marvell%20Qconvergeconsole&scoretype=cvssv4
https://vuldb.com/es/vuln/166616
https://github.com/advisories/GHSA-6xpf-79gp-9fc2