CVE-2020-18127: Indexhibit

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files.

Affected products

• Indexhibit Indexhibit: version 2.1.5 only

Published 2021-08-30. Last modified 2026-06-17.