{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFB83619-2C1B-438F-9606-0E6F1EE5E7AA",
              "versionEndExcluding": "5.4.14.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "374C9F64-6C40-48D9-A8F4-A150B203675C",
              "versionEndExcluding": "6.13.6.2",
              "versionStartIncluding": "6.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B7E98AE-3AC5-4A96-ACE6-027F0087A79E",
              "versionEndExcluding": "7.5.6.2",
              "versionStartIncluding": "7.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-legacy:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB9396C8-317A-4167-99A8-D8ED8562A381",
              "versionEndExcluding": "5.4.14.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-legacy:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F5B8064-99D2-4391-83D4-8041E8046948",
              "versionEndExcluding": "2017.12.7.2",
              "versionStartIncluding": "2017.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ez:ez_publish-legacy:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6612C69D-6AA0-48F8-BB57-E47A0A0F80F0",
              "versionEndExcluding": "2019.03.4.2",
              "versionStartIncluding": "2019.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution."
    },
    {
      "lang": "es",
      "value": "eZ Publish Kernel versiones anteriores a 5.4.14.1, versiones 6.x anteriores a 6.13.6.2 y versiones 7.x anteriores a 7.5.6.2 y eZ Publish Legacy versiones anteriores a 5.4.14.1, versiones 2017 anteriores a 2017.12.7.2 y versiones 2019 anteriores a 2019.03.4.2, permiten a atacantes remotos ejecutar c\u00f3digo arbitrario cargando c\u00f3digo PHP, a menos que la configuraci\u00f3n del vhost permita solo una ejecuci\u00f3n del archivo app.php."
    }
  ],
  "id": "CVE-2020-10806",
  "lastModified": "2024-11-21T04:56:06.587",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-03-22T16:15:12.307",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://ezplatform.com/security-advisories/ezsa-2020-001-remote-code-execution-in-file-uploads"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://ezplatform.com/security-advisories/ezsa-2020-001-remote-code-execution-in-file-uploads"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}