CVE-2020-13124

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary…

published August 11, 2020

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04715 · 91.8th percentile
Published
2020-08-11T15:48Z
EPSS history
Timeline
  • 11 AUG 15:48Z
    SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary…
    cvelistv5