CVE-2020-9465

EPSS 82.2%

Vexday Risk Score

40Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 82.2%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

06 feb 2020Exploit Metasploit disponible

28 feb 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie.

Productos afectados

n/a · n/a

Referencias

https://github.com/EyesOfNetworkCommunity/eonweb/issues/51 https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-3