CVE-2020-13378

HIGH 8.8EPSS 3.3%

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code.

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 3.31% chance of exploitation in the next 30 days, 88th percentile
Published: 2023-05-12
Updated: 2025-01-24

Proof-of-concept exploits (1)

https://inf0seq.github.io/cve/2020/04/21/OS.html

References

Related