CVE-2020-15227

Name of the Vulnerable Software and Affected Versions Nette versions prior to 2.0.19 Nette versions prior to 2.1.13 Nette versions prior to 2.2.10 Nette versions prior to 2.3.14 Nette versions prior to 2.4.16 Nette versions prior to 3.0.6

Description The issue allows for a code injection attack by passing specially formed parameters to a URL, which may possibly lead to remote code execution (RCE). This is a concern for Nette, a PHP/Composer MVC Framework.

Recommendations For versions prior to 2.0.19, update to version 2.0.19 or later. For versions prior to 2.1.13, update to version 2.1.13 or later. For versions prior to 2.2.10, update to version 2.2.10 or later. For versions prior to 2.3.14, update to version 2.3.14 or later. For versions prior to 2.4.16, update to version 2.4.16 or later. For versions prior to 3.0.6, update to version 3.0.6 or later.