{"id":"CVE-2020-8102","aliases":["EUVD-2020-29013","GHSA-frgh-7pf4-6v6f"],"status":"published","title":"Insufficient URL sanitization and validation in Safepay Browser (VA-8631)","description":"Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01097,"percentile":0.65855,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2020-06-22T09:35:14Z","modified":"2026-06-17T03:25:52Z","products":[{"vendor":"bitdefender","product":"bitdefender total security 2020"},{"vendor":"bitdefender","product":"total_security_2020"}],"references":[{"url":"https://www.bitdefender.com/support/security-advisories/insufficient-url-sanitization-validation-safepay-browser-va-8631/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8102"},{"url":"https://github.com/advisories/GHSA-frgh-7pf4-6v6f"}],"sources":{"cve":[{"id":"CVE-2020-8102","title":"Insufficient URL sanitization and validation in Safepay Browser (VA-8631)","description":"Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.","status":"published","published":"2020-06-22T09:35:14.496Z","modified":"2024-09-17T02:11:50.403Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:50.545879Z"}],"euvd":[{"id":"EUVD-2020-29013","description":"Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.","status":"published","published":"2020-06-22T09:35:14Z","modified":"2024-09-17T02:11:50Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:42.412483Z"}],"ghsa":[{"id":"GHSA-frgh-7pf4-6v6f","title":"Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total...","description":"Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.","status":"published","published":"2022-05-24T17:21:27Z","modified":"2023-01-29T05:02:58Z","updated_at":"2026-11-02T14:45:12.832224Z"}],"nvd":[{"id":"CVE-2020-8102","description":"Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.","status":"published","published":"2020-06-22T10:15:09.95Z","modified":"2026-06-17T03:25:52.07Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:07.249892Z"}]}}