CVE-2020-36893

CVE-2020-36893 is a directory traversal vulnerability affecting Eibiz i-Media Server Digital Signage 3.8.0, allowing unauthenticated remote attackers to access arbitrary files outside the web root via the 'oldfile' GET parameter. This vulnerability carries a high CVSS score of 7.5, indicating a critical risk due to its network-based attack vector, low attack complexity, and high confidentiality impact. While there are no known public exploits or active exploitation observed, the vulnerability has garnered significant community discussion, suggesting potential interest from threat actors. Organizations using the affected software should prioritize patching or implementing mitigation strategies to prevent unauthorized access to sensitive system and configuration files.