CVE-2020-7799

An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

19.81% chance of exploitation in the next 30 days, 97th percentile

Published

2020-01-28

Updated

2024-08-04

Proof-of-concept exploits (2)

• Pikaqi/cve-2020-77991★ · 2020-02-10
• ianxtianxt/CVE-2020-77993★ · 2020-02-19

References

• CVE Record
• NVD entry

Related

• CVE-2015-7501
• CVE-2017-10271
• CVE-2017-12149
• CVE-2017-12615
• CVE-2017-3248
• CVE-2017-3506