CVE-2020-10560

CVE-2020-10560 describes an arbitrary file read vulnerability in Open Source Social Network (OSSN) versions through 5.3. An attacker can leverage a user-controlled file path and weak cryptographic rand() to read any file accessible by the webserver, potentially leading to further compromise. This medium-severity vulnerability (CVSS 5.9) requires a high attack complexity, as the attacker must brute-force a SiteKey to inject into a crafted URL. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, though it has garnered some community discussion.