by Kastro
Paper/Archive/CVE-2020-8137

CVE-2020-8137

hackerone — Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attac…

EPSS 4%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 91.1.911 × 2018.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

Affected

ProductAffectedFixed inSource
blamerFixed Version: 1.0.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refhackerone.com/reports/772448