{"id":"CVE-2020-7302","aliases":["EUVD-2020-28429","GHSA-xh52-6wwc-2j2x"],"status":"published","title":"DLP ePO extension - Unrestricted Upload of File with Dangerous Type","description":"Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00697,"percentile":0.5334,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2020-08-13T02:50:13Z","modified":"2026-06-17T03:24:41Z","products":[{"vendor":"mcafee","product":"data_loss_prevention"},{"vendor":"mcafee","product":"dlp epo extension"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10326","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7302"},{"url":"https://github.com/advisories/GHSA-xh52-6wwc-2j2x"}],"sources":{"cve":[{"id":"CVE-2020-7302","title":"DLP ePO extension - Unrestricted Upload of File with Dangerous Type","description":"Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.","status":"published","published":"2020-08-13T02:50:13Z","modified":"2024-08-04T09:25:49.041Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28429","description":"Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.","status":"published","published":"2020-08-13T02:50:13Z","modified":"2024-08-04T09:25:49Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:08:00.054795Z"}],"ghsa":[{"id":"GHSA-xh52-6wwc-2j2x","title":"Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO...","description":"Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.","status":"published","published":"2022-05-24T17:25:37Z","modified":"2023-01-29T05:03:32Z","updated_at":"2026-11-02T14:45:20.476531Z"}],"nvd":[{"id":"CVE-2020-7302","description":"Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.","status":"published","published":"2020-08-13T03:15:14.57Z","modified":"2026-06-17T03:24:41.017Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:06:13.05572Z"}]}}