PT-2020-13341
CVE-2020-13124
·
تاريخ النشر
2020-08-11
·
تاريخ التحديث
2020-08-13
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SABnzbd versions 2.3.9 through 3.0.0Alpha2
Description
The issue allows an authenticated user to execute arbitrary Python commands on the underlying operating system due to a command injection vulnerability in the web configuration interface.
Recommendations
For SABnzbd version 2.3.9, update to a version that contains a fix for this issue.
For SABnzbd version 3.0.0Alpha2, update to a version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾