CVE-2020-5847

Unraid Remote Code Execution Vulnerability

9.8
CVSS 3.1
95.8 %
EPSS (current)
2021-11-03
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Unraid / Unraid

Published: 2020-03-16 · Due (CISA): 2022-05-03

CWE: – · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
nucleihttp/cves/2020/CVE-2020-5847.yamlUnRaid <=6.80 - Remote Code Execution–
metasploitexploit/linux/http/unraid_auth_bypass_execexploit/linux/http/unraid_auth_bypass_exec2020-02-10
exploitdb48353Unraid 6.8.0 - Auth Bypass PHP Code Execution (Metasploit)2020-04-20

References only — no downloads or instructions.

Sources