Lucene search

K
cvelistMitreCVELIST:CVE-2020-10879
HistoryMar 23, 2020 - 9:44 p.m.

CVE-2020-10879

2020-03-2321:44:49
mitre
www.cve.org
2

9.7 High

AI Score

Confidence

High

0.961 High

EPSS

Percentile

99.5%

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped.

9.7 High

AI Score

Confidence

High

0.961 High

EPSS

Percentile

99.5%

Related for CVELIST:CVE-2020-10879