CVEDB API

Vulnerability Details CVE-2020-26238

Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a template Injection vulnerability is present. This enables attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution (RCE) vulnerability. Only projects using the @Cron annotation to validate untrusted Cron expressions are affected. This issue was patched in version 9.1.3.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.08

EPSS Ranking 91.7%

CVSS Severity

CVSS v3 Score 7.9

CVSS v2 Score 6.8

References

Products affected by CVE-2020-26238

Cron-Utils Project » Cron-Utils » Version: 1.0.0

cpe:2.3:a:cron-utils_project:cron-utils:1.0.0
Cron-Utils Project » Cron-Utils » Version: 1.1.0

cpe:2.3:a:cron-utils_project:cron-utils:1.1.0
Cron-Utils Project » Cron-Utils » Version: 1.1.1

cpe:2.3:a:cron-utils_project:cron-utils:1.1.1
Cron-Utils Project » Cron-Utils » Version: 1.1.2

cpe:2.3:a:cron-utils_project:cron-utils:1.1.2
Cron-Utils Project » Cron-Utils » Version: 2.0.0

cpe:2.3:a:cron-utils_project:cron-utils:2.0.0
Cron-Utils Project » Cron-Utils » Version: 3.0.0

cpe:2.3:a:cron-utils_project:cron-utils:3.0.0
Cron-Utils Project » Cron-Utils » Version: 3.1.0

cpe:2.3:a:cron-utils_project:cron-utils:3.1.0
Cron-Utils Project » Cron-Utils » Version: 3.1.1

cpe:2.3:a:cron-utils_project:cron-utils:3.1.1
Cron-Utils Project » Cron-Utils » Version: 3.1.2

cpe:2.3:a:cron-utils_project:cron-utils:3.1.2
Cron-Utils Project » Cron-Utils » Version: 3.1.4

cpe:2.3:a:cron-utils_project:cron-utils:3.1.4
Cron-Utils Project » Cron-Utils » Version: 3.1.5

cpe:2.3:a:cron-utils_project:cron-utils:3.1.5
Cron-Utils Project » Cron-Utils » Version: 3.1.6

cpe:2.3:a:cron-utils_project:cron-utils:3.1.6
Cron-Utils Project » Cron-Utils » Version: 3.1.7

cpe:2.3:a:cron-utils_project:cron-utils:3.1.7
Cron-Utils Project » Cron-Utils » Version: 4.0.0

cpe:2.3:a:cron-utils_project:cron-utils:4.0.0
Cron-Utils Project » Cron-Utils » Version: 4.0.1

cpe:2.3:a:cron-utils_project:cron-utils:4.0.1
Cron-Utils Project » Cron-Utils » Version: 4.1.0

cpe:2.3:a:cron-utils_project:cron-utils:4.1.0
Cron-Utils Project » Cron-Utils » Version: 4.1.1

cpe:2.3:a:cron-utils_project:cron-utils:4.1.1
Cron-Utils Project » Cron-Utils » Version: 4.1.2

cpe:2.3:a:cron-utils_project:cron-utils:4.1.2
Cron-Utils Project » Cron-Utils » Version: 4.1.3

cpe:2.3:a:cron-utils_project:cron-utils:4.1.3
Cron-Utils Project » Cron-Utils » Version: 5.0.0

cpe:2.3:a:cron-utils_project:cron-utils:5.0.0
Cron-Utils Project » Cron-Utils » Version: 5.0.1

cpe:2.3:a:cron-utils_project:cron-utils:5.0.1
Cron-Utils Project » Cron-Utils » Version: 5.0.2

cpe:2.3:a:cron-utils_project:cron-utils:5.0.2
Cron-Utils Project » Cron-Utils » Version: 5.0.3

cpe:2.3:a:cron-utils_project:cron-utils:5.0.3
Cron-Utils Project » Cron-Utils » Version: 5.0.4

cpe:2.3:a:cron-utils_project:cron-utils:5.0.4
Cron-Utils Project » Cron-Utils » Version: 5.0.5

cpe:2.3:a:cron-utils_project:cron-utils:5.0.5
Cron-Utils Project » Cron-Utils » Version: 6.0.0

cpe:2.3:a:cron-utils_project:cron-utils:6.0.0
Cron-Utils Project » Cron-Utils » Version: 6.0.1

cpe:2.3:a:cron-utils_project:cron-utils:6.0.1
Cron-Utils Project » Cron-Utils » Version: 6.0.2

cpe:2.3:a:cron-utils_project:cron-utils:6.0.2
Cron-Utils Project » Cron-Utils » Version: 6.0.3

cpe:2.3:a:cron-utils_project:cron-utils:6.0.3
Cron-Utils Project » Cron-Utils » Version: 6.0.4

cpe:2.3:a:cron-utils_project:cron-utils:6.0.4
Cron-Utils Project » Cron-Utils » Version: 6.0.5

cpe:2.3:a:cron-utils_project:cron-utils:6.0.5
Cron-Utils Project » Cron-Utils » Version: 6.0.6

cpe:2.3:a:cron-utils_project:cron-utils:6.0.6
Cron-Utils Project » Cron-Utils » Version: 7.0.0

cpe:2.3:a:cron-utils_project:cron-utils:7.0.0
Cron-Utils Project » Cron-Utils » Version: 7.0.1

cpe:2.3:a:cron-utils_project:cron-utils:7.0.1
Cron-Utils Project » Cron-Utils » Version: 7.0.2

cpe:2.3:a:cron-utils_project:cron-utils:7.0.2
Cron-Utils Project » Cron-Utils » Version: 7.0.3

cpe:2.3:a:cron-utils_project:cron-utils:7.0.3
Cron-Utils Project » Cron-Utils » Version: 7.0.4

cpe:2.3:a:cron-utils_project:cron-utils:7.0.4
Cron-Utils Project » Cron-Utils » Version: 7.0.5

cpe:2.3:a:cron-utils_project:cron-utils:7.0.5
Cron-Utils Project » Cron-Utils » Version: 7.0.6

cpe:2.3:a:cron-utils_project:cron-utils:7.0.6
Cron-Utils Project » Cron-Utils » Version: 7.0.7

cpe:2.3:a:cron-utils_project:cron-utils:7.0.7
Cron-Utils Project » Cron-Utils » Version: 8.0.0

cpe:2.3:a:cron-utils_project:cron-utils:8.0.0
Cron-Utils Project » Cron-Utils » Version: 8.1.1

cpe:2.3:a:cron-utils_project:cron-utils:8.1.1
Cron-Utils Project » Cron-Utils » Version: 9.0.0

cpe:2.3:a:cron-utils_project:cron-utils:9.0.0
Cron-Utils Project » Cron-Utils » Version: 9.0.1

cpe:2.3:a:cron-utils_project:cron-utils:9.0.1
Cron-Utils Project » Cron-Utils » Version: 9.0.2

cpe:2.3:a:cron-utils_project:cron-utils:9.0.2
Cron-Utils Project » Cron-Utils » Version: 9.1.0

cpe:2.3:a:cron-utils_project:cron-utils:9.1.0
Cron-Utils Project » Cron-Utils » Version: 9.1.1

cpe:2.3:a:cron-utils_project:cron-utils:9.1.1
Cron-Utils Project » Cron-Utils » Version: 9.1.2

cpe:2.3:a:cron-utils_project:cron-utils:9.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-26238

Products

Pricing

Contact Us