Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-15227

CVE-2020-15227: Potential Remote Code Execution vulnerability

8.7

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-15227
GHSA ID
GHSA-8gv3-3j7f-wg94
EPSS Score
0.99852%
CWE
CWE-74
Published
10/2/2020
Updated
2/7/2024
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
nette/applicationcomposer>= 2.2.0, < 2.2.102.2.10
nette/applicationcomposer>= 2.3.0, < 2.3.142.3.14
nette/applicationcomposer>= 2.4.0, < 2.4.162.4.16
nette/applicationcomposer>= 3.0.0, < 3.0.63.0.6
nette/applicationcomposer>= 2.0.0, < 2.0.192.0.19
nette/applicationcomposer>= 2.1.0, < 2.1.132.1.13

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

P**k***s n*tt*/*ppli**tion v*rsions prior to *.*.**, *.*.**, *.*.**, *.*.* *n* n*tt*/n*tt* v*rsions prior to *.*.** *n* *.*.** *r* vuln*r**l* to *n *o** inj**tion *tt**k *y p*ssin* sp**i*lly *orm** p*r*m*t*rs to URL t**t m*y possi*ly l***in* to R**.

Reasoning

No *n*lysis *v*il**l*