Read the docs

nette

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

nette records in CISA KEV

No nette vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Latte 2 records MEDIUM Application 1 record HIGH

Records

1 record in Application · all components

TI-2020-11999 CVE-2020-15227 · GHSA-8gv3-3j7f-wg94

Remote code execution in nette application

Priority HIGH 67

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34424 Published 2020-10-01 Fixed in 2.0.19, 2.1.13 +4 CWE-74
Open these records in search →