What is GHSA-5wxx-482m-3pgp?

GHSA-5wxx-482m-3pgp is a security advisory published by GitHub Security Advisories with High severity. A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability...

Which CVE IDs does GHSA-5wxx-482m-3pgp cover?

GHSA-5wxx-482m-3pgp covers the following CVE IDs: CVE-2017-20120. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5wxx-482m-3pgp?

GHSA-5wxx-482m-3pgp has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-5wxx-482m-3pgpHighCVSS 8.8

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability...

Vendor

GitHub Security Advisories

Published

June 30, 2022

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2017-20120 →

📋 Description

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-20120
https://vuldb.com/?id.96634
https://www.exploit-db.com/exploits/41184
https://github.com/advisories/GHSA-5wxx-482m-3pgp