CVE-2020-36542: demokratian Improper Privilege Management
Vulnerability summary
CVE-2020-36542 is a critical (CVSS 9.8) Improper Privilege Management vulnerability in demokratian. EPSS estimates a 1.40% chance of exploitation in the next 30 days, higher than 72% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 03-06-2022PublishedVulnerability first disclosed.
- 15-04-2025Last modifiedVulnerability information updated.
Description
A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/install3.php. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA7.3HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LDiffers
EPSS trend
Probability
1.40%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
0.00 pp
From 1.40% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (alquimistadesistemas.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Demokratian1 product
Unspecified1 product
- demokratiann/a
2 vendors · 2 products
References
3 links- alquimistadesistemas.com/sql-injection-y-archivo-peligroso-en-demokratianX Refsource MISCExploitPatchThird Party Advisory
- bitbucket.org/csalgadow/demokratian_votaciones/commits/0d073ee461edd5f42528d41e00bf0a7b22e86bb3X Refsource MISCPatchThird Party Advisory