Exposures › CVE-2020-5847

CVE-2020-5847

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2021-11-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-5847

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

Players implicated

Unraid · vendor Unraid · product

Description

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.