Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2020-5847: Unraid Remote Code Execution Vulnerability

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2020-5847Unraid
Related
CVE-2020-5849: Unraid Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021