Security Advisory

CVE-2020-15227

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-01 19:00:19
Last updated 2024-08-04 13:08:22
Assigner GitHub_M
State PUBLISHED

Description

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.