VULNERABILITY INTELLIGENCE

CVE-2020-15715

CVSS score9.9 CRITICAL

EPSS probability4.20%

CISA KEVNot currently listed

Published2020-07-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory