VDB

CVE-2020-15227

CVE-2020-15227 PUBLISHED

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

EPSS 93.79% · 99.9th percentile

Risk Scores

EPSS Score
93.79%
99.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSphp-nette0, 2.3.5-1, 2.3.8-1
Ubuntu:18.04:LTSphp-nette0, 2.4-20160731-1

Exploit Intelligence

…and 637 more exploits

Timeline

  • Jan 19, 1970 VulnCheck XDB Entry
  • Jan 19, 1970 VulnCheck XDB Entry
  • Jan 19, 1970 VulnCheck XDB Entry
  • Oct 1, 2020 CVE Published
  • Oct 12, 2020 VulnCheck KEV Exploitation
  • Nov 19, 2020 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Nov 18, 2021 CVE Updated
  • Dec 27, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›