deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-26154
Published: 2020-09-30
Description: url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00030.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00033.html; https://bugs.debian.org/968366
CVE: CVE-2020-26157
Published: 2020-09-30
Description: Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/leanote/desktop-app/issues/353; https://github.com/leanote/desktop-app/issues/353
CVE: CVE-2020-26158
Published: 2020-09-30
Description: Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/leanote/desktop-app/issues/353; https://github.com/leanote/desktop-app/issues/353
CVE: CVE-2020-26160
Published: 2020-09-30
Description: jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-755
References: https://github.com/dgrijalva/jwt-go/pull/426; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515; https://github.com/dgrijalva/jwt-go/pull/426
CVE: CVE-2020-26163
Published: 2020-09-30
Description: BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link.
CVSS Score: 8.8 (HIGH)
References: https://github.com/bigbluebutton/greenlight/pull/1543; https://github.com/bigbluebutton/greenlight/releases/tag/release-2.5.6; https://www.sakshamanand.com/host-header-injection-bigbluebutton/
CVE: CVE-2020-8238
Published: 2020-09-30
Description: A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588; https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588
CVE: CVE-2020-8243
Published: 2020-09-30
Description: A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8243
CVE: CVE-2020-8256
Published: 2020-09-30
Description: A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588; https://www.gosecure.net/blog/2020/11/13/forget-your-perimeter-part-2-four-vulnerabilities-in-pulse-connect-secure/; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44588
CVE: CVE-2020-14375
Published: 2020-09-30
Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and the host. An attacker in a VM can change the contents of the memory after vhost_crypto has validated it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367, CWE-367
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html; http://www.openwall.com/lists/oss-security/2021/01/04/1
CVE: CVE-2020-14376
Published: 2020-09-30
Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html; http://www.openwall.com/lists/oss-security/2021/01/04/1
CVE: CVE-2020-14377
Published: 2020-09-30
Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read are then written back to the guest virtual machine memory. This vulnerability can be used by an attacker in a virtual machine to read significant amounts of host memory. The highest threat from this vulnerability is to data confidentiality and system availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html; http://www.openwall.com/lists/oss-security/2021/01/04/1
CVE: CVE-2020-14378
Published: 2020-09-30
Description: An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause `move_desc` to get stuck in a 4,294,967,295-count iteration loop. Depending on how `vhost_crypto` is being used this could prevent other VMs or network tasks from being serviced by the busy DPDK lcore for an extended period.
CVSS Score: 3.3 (LOW)
CWE: CWE-191, CWE-191
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html; http://www.openwall.com/lists/oss-security/2021/01/04/1
CVE: CVE-2020-15488
Published: 2020-09-30
Description: Re:Desk 2.3 allows insecure file upload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/; https://www.re-desk.com/download-help-desk-software.html; https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/
CVE: CVE-2020-15849
Published: 2020-09-30
Description: Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. A malicious actor with access to an administrative account could abuse this vulnerability to recover sensitive data from the application's database, allowing for authorization bypass and taking over additional accounts by means of modifying password-reset tokens stored in the database. Remote command execution is also possible by leveraging this to abuse the Yii framework's bizRule functionality, allowing for arbitrary PHP code to be executed by the application. Remote command execution is also possible by using this together with a separate insecure file upload vulnerability (CVE-2020-15488).
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/; https://www.re-desk.com/download-help-desk-software.html; https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/
CVE: CVE-2020-14374
Published: 2020-09-30
Description: A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to write arbitrary data to any address in the vhost_crypto application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00006.html; http://www.openwall.com/lists/oss-security/2021/01/04/1
CVE: CVE-2020-25626
Published: 2020-09-30
Description: A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come from user input. This allows a user who can control those strings to inject malicious <script> tags, leading to a cross-site-scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1878635; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2022/dsa-5186
CVE: CVE-2020-25816
Published: 2020-09-30
Description: HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their TTL because expiration time was not scheduled correctly. Fixed in 1.4.7 and 1.5.4.
CVSS Score: 6.8 (MEDIUM)
References: https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#154; https://www.hashicorp.com/blog/category/vault; https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#154
CVE: CVE-2020-12715
Published: 2020-09-30
Description: RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12715; https://www.pacsone.net/download.htm; https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12715
CVE: CVE-2020-12869
Published: 2020-09-30
Description: RainbowFish PacsOne Server 6.8.4 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12869; https://www.pacsone.net/download.htm; https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12869
CVE: CVE-2020-12870
Published: 2020-09-30
Description: RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12870; https://www.pacsone.net/download.htm; https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12870
CVE: CVE-2020-13336
Published: 2020-09-30
Description: An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13336.json; https://gitlab.com/gitlab-org/gitlab/-/issues/215970; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13336.json
CVE: CVE-2020-13952
Published: 2020-09-30
Description: In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated fields including the contents of query description metadata database, the hashed version of the authenticated users’ password, and access to connection information including the plaintext password for the current connection. It would also be possible to run arbitrary methods on the database connection object for the Presto or Hive connection, allowing the user to bypass security controls internal to Superset. This vulnerability is present in every Apache Superset version < 0.37.2.
CVSS Score: 8.1 (HIGH)
References: https://lists.apache.org/thread.html/rf1faa368f580d2cb691576bee1277855f769667f3114d5df1dacbea6%40%3Cdev.superset.apache.org%3E; https://lists.apache.org/thread.html/rf1faa368f580d2cb691576bee1277855f769667f3114d5df1dacbea6%40%3Cdev.superset.apache.org%3E
CVE: CVE-2020-16234
Published: 2020-09-30
Description: In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-254-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-254-02
CVE: CVE-2020-25288
Published: 2020-09-30
Description: An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafted Regular Expression property is used, improper escaping of the corresponding form input's pattern attribute allows HTML injection and, if CSP settings permit, execution of arbitrary JavaScript.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://github.com/mantisbt/mantisbt/commit/221cf323f16a9738a5b27aaba94758f11281d85c; https://mantisbt.org/bugs/view.php?id=27275; http://github.com/mantisbt/mantisbt/commit/221cf323f16a9738a5b27aaba94758f11281d85c
CVE: CVE-2020-25781
Published: 2020-09-30
Description: An issue was discovered in file_download.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the (supposedly private) attachments linked to these notes by accessing the corresponding file download URL directly.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://github.com/mantisbt/mantisbt/commit/5595c90f11c48164331a20bb9c[PII_REDACTED]6e93; http://github.com/mantisbt/mantisbt/commit/9de20c09e5a557e57159a61657ce62f1a4f578fe; https://mantisbt.org/bugs/view.php?id=27039
CVE: CVE-2020-25830
Published: 2020-09-30
Description: An issue was discovered in MantisBT before 2.24.3. Improper escaping of a custom field's name allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript when attempting to update said custom field via bug_actiongroup_page.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://github.com/mantisbt/mantisbt/commit/8c6f4d8859785b67fb80ac65100ac5259ed9237d; https://mantisbt.org/bugs/view.php?id=27304; http://github.com/mantisbt/mantisbt/commit/8c6f4d8859785b67fb80ac65100ac5259ed9237d
CVE: CVE-2020-26159
Published: 2020-09-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-6654
Published: 2020-09-30
Description: A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLLs when the software try to load vci11un6.DLL and cinpl.DLL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-427, CWE-426, CWE-427
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/9000x-software-eaton-vulnerability-advisory.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/9000x-software-eaton-vulnerability-advisory.pdf
CVE: CVE-2019-20902
Published: 2020-10-01
Description: Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1.
CVSS Score: 7.5 (HIGH)
References: https://jira.atlassian.com/browse/CWD-5409; https://jira.atlassian.com/browse/CWD-5409
CVE: CVE-2019-20903
Published: 2020-10-01
Description: The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://atlaskit.atlassian.com/packages/editor/editor-core/changelog/113.1.5; https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://www.npmjs.com/package/%40atlaskit/editor-core
CVE: CVE-2020-8109
Published: 2020-10-01
Description: A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. This can result in denial-of-service. This issue affects: Bitdefender Engines version 7.84892 and prior versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.bitdefender.com/support/security-advisories/bitdefender-ace-xmd-parser-out-of-bounds-write-va-8772; https://www.bitdefender.com/support/security-advisories/bitdefender-ace-xmd-parser-out-of-bounds-write-va-8772
CVE: CVE-2020-24860
Published: 2020-10-01
Description: CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fields. The user can get cookies from every authenticated user who visits the website.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/159434/CMS-Made-Simple-2.2.14-Cross-Site-Scripting.html; https://www.cmsmadesimple.org; https://www.exploit-db.com/exploits/48851
CVE: CVE-2020-24861
Published: 2020-10-01
Description: GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://get-simple.info; https://www.exploit-db.com/exploits/48850; https://www.youtube.com/watch?v=8IMfD5KGt_U
CVE: CVE-2020-25990
Published: 2020-10-01
Description: WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://websitebaker.org/pages/en/home.php; https://www.exploit-db.com/exploits/48849; https://websitebaker.org/pages/en/home.php
CVE: CVE-2020-4576
Published: 2020-10-01
Description: IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. IBM X-Force ID: 184428.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184428; https://www.ibm.com/support/pages/node/6339807; https://exchange.xforce.ibmcloud.com/vulnerabilities/184428
CVE: CVE-2019-19393
Published: 2020-10-01
Description: The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page. This allows an attacker to backdoor the device with HTML and browser-interpreted content (such as JavaScript or other client-side scripts) as the content is always displayed after and before login. Persistent XSS allows an attacker to modify displayed content or to change the victim's information. Successful exploitation requires access to the web management interface, either with valid credentials or a hijacked session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/miguelhamal/CVE-2019-19393; https://www.rittal.us/monitoring-security/cmc-iii.html; https://github.com/miguelhamal/CVE-2019-19393
CVE: CVE-2020-16844
Published: 2020-10-01
Description: In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or namespace fields, callers will never be denied access, bypassing the intended policy.
CVSS Score: 6.8 (MEDIUM)
References: https://github.com/istio/istio/releases; https://istio.io/latest/news/security/istio-security-2020-009/; https://github.com/istio/istio/releases
CVE: CVE-2020-24620
Published: 2020-10-01
Description: Unisys Stealth(core) before 4.0.134 stores passwords in a recoverable format. Therefore, a search of Enterprise Manager can potentially reveal credentials.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=56; https://public.support.unisys.com/common/public/vulnerability/NVD_Home.aspx; https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=56
CVE: CVE-2020-25017
Published: 2020-10-01
Description: Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
CVSS Score: 8.3 (HIGH)
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4w; https://groups.google.com/forum/#%21forum/envoy-security-announce; https://github.com/envoyproxy/envoy/security/advisories/GHSA-2v25-cjjq-5f4w
CVE: CVE-2020-25018
Published: 2020-10-01
Description: Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.
CVSS Score: 7.5 (HIGH)
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-fwwh-fc9w-9673; https://groups.google.com/forum/#%21forum/envoy-security-announce; https://github.com/envoyproxy/envoy/security/advisories/GHSA-fwwh-fc9w-9673
CVE: CVE-2020-15228
Published: 2020-10-01
Description: In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows that log untrusted data to stdout may invoke these commands, resulting in the path or environment variables being modified without the intention of the workflow or action author. The runner will release an update that disables the `set-env` and `add-path` workflow commands in the near future. For now, users should upgrade to `@actions/core v1.2.6` or later, and replace any instance of the `set-env` or `add-path` commands in their workflows with the new Environment File Syntax. Workflows and actions using the old commands or older versions of the toolkit will start to warn, then error out during workflow execution.
CVSS Score: 3.5 (LOW)
CWE: CWE-20, CWE-77
References: http://packetstormsecurity.com/files/159794/GitHub-Widespread-Injection.html; https://github.com/actions/toolkit/security/advisories/GHSA-mfwh-5m23-j46w; http://packetstormsecurity.com/files/159794/GitHub-Widespread-Injection.html
CVE: CVE-2020-25200
Published: 2020-10-01
Description: Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username is valid, then after 20 login attempts, the server will start responding with error 400. Invalid usernames will receive error 401 indefinitely. Note: This has been disputed by the vendor as not a vulnerability. They argue that this is an intended design
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/lukaszstu/pritunl/blob/master/CVE-2020-25200; https://pritunl.com; https://pritunl.com/security
CVE: CVE-2020-15227
Published: 2020-10-01
Description: Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.
CVSS Score: 8.7 (HIGH)
CWE: CWE-74, CWE-94
References: https://github.com/nette/application/security/advisories/GHSA-8gv3-3j7f-wg94; https://lists.debian.org/debian-lts-announce/2021/04/msg00003.html; https://packagist.org/packages/nette/application