CVE-2020-19907

2021-07-1220:15:08

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.6%

JSON

A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows authenticated attackers to execute any command or service.

CPENameOperatorVersion
calderaeq2.3.0
calderaeq2.1.0
calderaeq2.0.0
calderaeq2.3.1

Name	Operator	Version
caldera	eq	2.3.0
caldera	eq	2.1.0
caldera	eq	2.0.0
caldera	eq	2.3.1

References

cwe.mitre.org/data/definitions/78.html

github.com/mitre/caldera/issues/462