CVE-2020-20601: Code Injection
Published Dec 22, 2021
·Updated
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.
Affected Software
5 affected components
ThinkCMF ThinkCMF=x1.6.0
ThinkCMF ThinkCMF=x2.1.0
ThinkCMF ThinkCMF=x2.2.0
ThinkCMF ThinkCMF=x2.2.1
ThinkCMF ThinkCMF=x2.2.2
Event History
Dec 22, 2021
CVE Published
via MITRE·10:43 PM
Data Sourced
via MITRE·10:43 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-20601?
CVE-2020-20601 is considered a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2020-20601?
To fix CVE-2020-20601, upgrade ThinkCMF to version 2.2.3 or later.
3
What versions of ThinkCMF are affected by CVE-2020-20601?
ThinkCMF versions 1.6.0, 2.1.0, 2.2.0, 2.2.1, and 2.2.2 are affected by CVE-2020-20601.
4
What type of attack can exploit CVE-2020-20601?
CVE-2020-20601 can be exploited by attackers through crafted packets that lead to arbitrary code execution.
5
Is there a patch available for CVE-2020-20601?
Yes, a patch is available by updating ThinkCMF to version 2.2.3 or newer.