CVE-2020-9465

EPSS 82.2%

Vexday Risk Score

40Atenção

Decisão SSVC (CISA)

Attend

PoC disponível → acompanhar de perto

Maturidade do exploit

Exploit funcional

Exploit automatizável disponível (Nuclei/Metasploit).

CVSS —EPSS 82.2%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

06 fev 2020Exploit Metasploit disponível

28 fev 2020Publicada no NVD

Recomendação: Planejar correção próxima — já existe PoC pública.

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie.

Produtos afetados

n/a · n/a

Referências

https://github.com/EyesOfNetworkCommunity/eonweb/issues/51 https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-3