CVE-2020-19907

2021-07-1219:14:39

mitre

www.cve.org

command injection

caldera

vulnerability

authenticated attackers

AI Score

8.9

Confidence

High

EPSS

0.013

Percentile

85.7%

JSON

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service.

References

cwe.mitre.org/data/definitions/78.html

github.com/mitre/caldera/issues/462