HashbrowncmsCVEs & Vulnerabilities
3 CVEs affecting Hashbrowncms products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
hashbrown cms 3
CVE-2020-6949HIGH
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.
13 Jan 2020
8.8
CVSS
CVE-2020-6948CRITICAL
A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password.
13 Jan 2020
9.8
CVSS
CVE-2020-5840HIGH
An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field.
6 Jan 2020
7.5
CVSS
← PrevPage 1 / 1Next →