CVE-2020-15227: Injection Vulnerability

October 1, 2020 (updated November 18, 2021)

Nette are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

References

nvd.nist.gov/vuln/detail/CVE-2020-15227

Code Behaviors & Features

Detect and mitigate CVE-2020-15227 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →