« Volver al listado

CVE-2020-10806

Estado: ModificadaCrítica (9.8)—

eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

EZ — EZ Publish-kernelEZ — EZ Publish-legacy

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-10806",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-03-22T16:15:12.307",
  "references": [
    {
      "url": "https://ezplatform.com/security-advisories/ezsa-2020-001-remote-code-execution-in-file-uploads",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://ezplatform.com/security-advisories/ezsa-2020-001-remote-code-execution-in-file-uploads",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution."
    },
    {
      "lang": "es",
      "value": "eZ Publish Kernel versiones anteriores a 5.4.14.1, versiones 6.x anteriores a 6.13.6.2 y versiones 7.x anteriores a 7.5.6.2 y eZ Publish Legacy versiones anteriores a 5.4.14.1, versiones 2017 anteriores a 2017.12.7.2 y versiones 2019 anteriores a 2019.03.4.2, permiten a atacantes remotos ejecutar código arbitrario cargando código PHP, a menos que la configuración del vhost permita solo una ejecución del archivo app.php."
    }
  ],
  "lastModified": "2026-06-17T02:48:28.180",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-kernel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFB83619-2C1B-438F-9606-0E6F1EE5E7AA",
              "versionEndExcluding": "5.4.14.1"
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-kernel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "374C9F64-6C40-48D9-A8F4-A150B203675C",
              "versionEndExcluding": "6.13.6.2",
              "versionStartIncluding": "6.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-kernel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B7E98AE-3AC5-4A96-ACE6-027F0087A79E",
              "versionEndExcluding": "7.5.6.2",
              "versionStartIncluding": "7.0.0"
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-legacy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB9396C8-317A-4167-99A8-D8ED8562A381",
              "versionEndExcluding": "5.4.14.1"
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-legacy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F5B8064-99D2-4391-83D4-8041E8046948",
              "versionEndExcluding": "2017.12.7.2",
              "versionStartIncluding": "2017.0"
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-legacy:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6612C69D-6AA0-48F8-BB57-E47A0A0F80F0",
              "versionEndExcluding": "2019.03.4.2",
              "versionStartIncluding": "2019.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}