Hashbrowncms Hashbrown Cms
3 CVEs affecting Hashbrowncms Hashbrown Cms. Latest disclosed: 2020-01-13. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6948 | Critical | 9.8 | 2020-01-13 | A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mish… |
CVE-2020-6949 | High | 8.8 | 2020-01-13 | A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin us… |
CVE-2020-5840 | High | 7.5 | 2020-01-06 | An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name o… |