cve.bz

CVE-2020-15227

9.8 criticalEPSS 34%

Critical (9.8). EPSS 34% chance of exploitation in the next 30 days.

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
34% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWEs
CWE-94, CWE-74
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON