Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-27575

Опубликовано: 08 мар. 2021
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maxum:rumpus:8.2.13:*:*:*:*:*:*:*
cpe:2.3:a:maxum:rumpus:8.2.14:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.06725
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation.

EPSS

Процентиль: 91%
0.06725
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-78