CVE-2020-13124

CVE-2020-13124

EPSS 4.6%

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/sabnzbd/sabnzbd/commits/develop https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-9x87-96gg-33w2 https://sabnzbd.org/downloads