CVE-2020-20601

2021-12-2223:15:07

Google

osv.dev

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

CPENameOperatorVersion
cmfxeqX2.2.0
cmfxeqX2.2.1
cmfxeqx1.6.0
cmfxeqx2.1.0
cmfxeqX2.2.2

Name	Operator	Version
cmfx	eq	X2.2.0
cmfx	eq	X2.2.1
cmfx	eq	x1.6.0
cmfx	eq	x2.1.0
cmfx	eq	X2.2.2

References

blog.riskivy.com/thinkcmf-%e6%a1%86%e6%9e%b6%e4%b8%8a%e7%9a%84%e4%bb%bb%e6%84%8f%e5%86%85%e5%ae%b9%e5%8c%85%e5%90%ab%e6%bc%8f%e6%b4%9e/