Vulnerability Database

315,294

Total vulnerabilities in the database

CVE-2020-15227

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

Published: Oct 1, 2020
Updated: Nov 16, 2025
CVE: CVE-2020-15227
GHSA: GHSA-8gv3-3j7f-wg94
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.7
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Affected Software
References

Software	From	Fixed in
debian / debian_linux	9.0	9.0.x
nette / application	2.2.0	2.2.10
nette / application	2.3.0	2.3.14
nette / application	2.4.0	2.4.16
nette / application	3.0.0	3.0.6
nette / application	2.0.0	2.0.19
nette / application	2.1.0	2.1.13

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo