CVE-2020-24925: Elkarbackup

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure /app/elkarbackup/src/Binovo/ElkarBackupBundle/Controller/DefaultController.php

Affected products

• Elkarbackup Elkarbackup: version 1.3.3 only

Published 2020-09-15. Last modified 2026-06-17.