CVE-2021-20114

CVE-2021-20114 describes a sensitive information exposure vulnerability in TCExam versions up to and including 14.8.1. When installed with default settings, unauthenticated attackers could access the /cache/backup/ directory, which contained sensitive database backup files. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with low complexity, requiring no user interaction, and leading to high confidentiality impact. While there is no evidence of active exploitation or Metasploit modules, a Nuclei template exists, and the vulnerability has not garnered significant community discussion or media coverage.