CVE-2017-20101: ProjectSend

Medium severity, CVSS 5.7. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.

Affected products

• ProjectSend ProjectSend: version r754 only

Published 2022-06-27. Last modified 2026-06-17.