CVE-2020-13124 - SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system

Back Back to CVE browser

HIGH

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system

Published Aug 11, 2020

8.8

HIGH

CVSS 3.1

EPSS 4.71%

Description

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-5400
Advisory
https://github.com/sabnzbd/sabnzbd/commits/develop
x_refsource_MISCPatchThird Party Advisory
https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-9x87-96gg-33w2
x_refsource_CONFIRMPatchThird Party Advisory
https://sabnzbd.org/downloads
x_refsource_MISCProductVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-5400		Advisory
https://github.com/sabnzbd/sabnzbd/commits/develop		x_refsource_MISCPatchThird Party Advisory
https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-9x87-96gg-33w2		x_refsource_CONFIRMPatchThird Party Advisory
https://sabnzbd.org/downloads		x_refsource_MISCProductVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 11, 2020

Updated Aug 4, 2024

Reserved May 17, 2020

Link CVE-2020-13124

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-13124

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 11, 2020

Updated Aug 4, 2024

Link EUVD-2020-5400

GitHub

No data