CVE-2020-6948

2020-01-1319:15:12

Google

osv.dev

7.8 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password.

CPENameOperatorVersion
hashbrown-cmseq0.7.2
hashbrown-cmseq0.10.2
hashbrown-cmseq1.2.2
hashbrown-cmseq1.3.1
hashbrown-cmseq1.0.7
hashbrown-cmseq0.10.1
hashbrown-cmseq0.7.1
hashbrown-cmseq1.1.4
hashbrown-cmseq0.9.3
hashbrown-cmseq0.9.6

Name	Operator	Version
hashbrown-cms	eq	0.7.2
hashbrown-cms	eq	0.10.2
hashbrown-cms	eq	1.2.2
hashbrown-cms	eq	1.3.1
hashbrown-cms	eq	1.0.7
hashbrown-cms	eq	0.10.1
hashbrown-cms	eq	0.7.1
hashbrown-cms	eq	1.1.4
hashbrown-cms	eq	0.9.3
hashbrown-cms	eq	0.9.6