CVE-2020-15227

—

CVSS 3.1

9.8 critical

EPSS

34%p98

Published

Oct 1, 2020 (Oct 1, 2020)

Modified

Jun 17, 2026

Description

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

Vendors: nette debian
Products: application, debian linux
Weakness: CWE-74, CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (34.4%)

In the news0 stories

No ingested article mentions this CVE yet.