Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-10879
HistoryMar 23, 2020 - 10:15 p.m.

Command injection

2020-03-2322:15:00
PRIOn knowledge base
www.prio-n.com
2

9.6 High

AI Score

Confidence

High

0.961 High

EPSS

Percentile

99.5%

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped.

CPENameOperatorVersion
rconfiglt3.9.5

9.6 High

AI Score

Confidence

High

0.961 High

EPSS

Percentile

99.5%

Related for PRION:CVE-2020-10879