CVE-2020-7832: DEXT5

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.(CVE-2020-7832)

Affected products

• DEXT5 DEXT5: up to and including 5.0.0.117

Published 2021-09-07. Last modified 2026-06-17.