Code injection

2020-01-0618:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

54.3%

JSON

An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field.

CPENameOperatorVersion
hashbrown_cmslt1.3.2

CPE	Name	Operator	Version
	hashbrown_cms	lt	1.3.2

References

github.com/HashBrownCMS/hashbrown-cms/compare/v1.3.1...v1.3.2

github.com/HashBrownCMS/hashbrown-cms/releases/tag/v1.3.2

0.002 Low

EPSS

Percentile

54.3%

JSON

Related for PRION:CVE-2020-5840