Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-26284

Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%PATH%` on Windows. In Hugo before version 0.79.1, if a malicious file with the same name (`exe` or `bat`) is found in the current working directory at the time of running `hugo`, the malicious command will be invoked instead of the system one. Windows users who run `hugo` inside untrusted Hugo sites are affected. Users should upgrade to Hugo v0.79.1. Other than avoiding untrusted Hugo sites, there is no workaround.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.7%
CVSS Severity
CVSS v3 Score 7.7
CVSS v2 Score 8.5
Products affected by CVE-2020-26284
  • Gohugo » Hugo » Version: N/A
    cpe:2.3:a:gohugo:hugo:-
  • Gohugo » Hugo » Version: 0.10
    cpe:2.3:a:gohugo:hugo:0.10
  • Gohugo » Hugo » Version: 0.11
    cpe:2.3:a:gohugo:hugo:0.11
  • Gohugo » Hugo » Version: 0.12
    cpe:2.3:a:gohugo:hugo:0.12
  • Gohugo » Hugo » Version: 0.13
    cpe:2.3:a:gohugo:hugo:0.13
  • Gohugo » Hugo » Version: 0.14
    cpe:2.3:a:gohugo:hugo:0.14
  • Gohugo » Hugo » Version: 0.15
    cpe:2.3:a:gohugo:hugo:0.15
  • Gohugo » Hugo » Version: 0.16
    cpe:2.3:a:gohugo:hugo:0.16
  • Gohugo » Hugo » Version: 0.17
    cpe:2.3:a:gohugo:hugo:0.17
  • Gohugo » Hugo » Version: 0.18
    cpe:2.3:a:gohugo:hugo:0.18
  • Gohugo » Hugo » Version: 0.18.1
    cpe:2.3:a:gohugo:hugo:0.18.1
  • Gohugo » Hugo » Version: 0.19
    cpe:2.3:a:gohugo:hugo:0.19
  • Gohugo » Hugo » Version: 0.20
    cpe:2.3:a:gohugo:hugo:0.20
  • Gohugo » Hugo » Version: 0.20.1
    cpe:2.3:a:gohugo:hugo:0.20.1
  • Gohugo » Hugo » Version: 0.20.2
    cpe:2.3:a:gohugo:hugo:0.20.2
  • Gohugo » Hugo » Version: 0.20.3
    cpe:2.3:a:gohugo:hugo:0.20.3
  • Gohugo » Hugo » Version: 0.20.4
    cpe:2.3:a:gohugo:hugo:0.20.4
  • Gohugo » Hugo » Version: 0.20.5
    cpe:2.3:a:gohugo:hugo:0.20.5
  • Gohugo » Hugo » Version: 0.20.6
    cpe:2.3:a:gohugo:hugo:0.20.6
  • Gohugo » Hugo » Version: 0.20.7
    cpe:2.3:a:gohugo:hugo:0.20.7
  • Gohugo » Hugo » Version: 0.21
    cpe:2.3:a:gohugo:hugo:0.21
  • Gohugo » Hugo » Version: 0.22
    cpe:2.3:a:gohugo:hugo:0.22
  • Gohugo » Hugo » Version: 0.22.1
    cpe:2.3:a:gohugo:hugo:0.22.1
  • Gohugo » Hugo » Version: 0.23
    cpe:2.3:a:gohugo:hugo:0.23
  • Gohugo » Hugo » Version: 0.24
    cpe:2.3:a:gohugo:hugo:0.24
  • Gohugo » Hugo » Version: 0.24.1
    cpe:2.3:a:gohugo:hugo:0.24.1
  • Gohugo » Hugo » Version: 0.25
    cpe:2.3:a:gohugo:hugo:0.25
  • Gohugo » Hugo » Version: 0.25.1
    cpe:2.3:a:gohugo:hugo:0.25.1
  • Gohugo » Hugo » Version: 0.26
    cpe:2.3:a:gohugo:hugo:0.26
  • Gohugo » Hugo » Version: 0.27
    cpe:2.3:a:gohugo:hugo:0.27
  • Gohugo » Hugo » Version: 0.27.1
    cpe:2.3:a:gohugo:hugo:0.27.1
  • Gohugo » Hugo » Version: 0.28
    cpe:2.3:a:gohugo:hugo:0.28
  • Gohugo » Hugo » Version: 0.29
    cpe:2.3:a:gohugo:hugo:0.29
  • Gohugo » Hugo » Version: 0.30
    cpe:2.3:a:gohugo:hugo:0.30
  • Gohugo » Hugo » Version: 0.30.1
    cpe:2.3:a:gohugo:hugo:0.30.1
  • Gohugo » Hugo » Version: 0.30.2
    cpe:2.3:a:gohugo:hugo:0.30.2
  • Gohugo » Hugo » Version: 0.31
    cpe:2.3:a:gohugo:hugo:0.31
  • Gohugo » Hugo » Version: 0.31.1
    cpe:2.3:a:gohugo:hugo:0.31.1
  • Gohugo » Hugo » Version: 0.32
    cpe:2.3:a:gohugo:hugo:0.32
  • Gohugo » Hugo » Version: 0.32.1
    cpe:2.3:a:gohugo:hugo:0.32.1
  • Gohugo » Hugo » Version: 0.32.2
    cpe:2.3:a:gohugo:hugo:0.32.2
  • Gohugo » Hugo » Version: 0.32.3
    cpe:2.3:a:gohugo:hugo:0.32.3
  • Gohugo » Hugo » Version: 0.32.4
    cpe:2.3:a:gohugo:hugo:0.32.4
  • Gohugo » Hugo » Version: 0.33
    cpe:2.3:a:gohugo:hugo:0.33
  • Gohugo » Hugo » Version: 0.34
    cpe:2.3:a:gohugo:hugo:0.34
  • Gohugo » Hugo » Version: 0.35
    cpe:2.3:a:gohugo:hugo:0.35
  • Gohugo » Hugo » Version: 0.36
    cpe:2.3:a:gohugo:hugo:0.36
  • Gohugo » Hugo » Version: 0.36.1
    cpe:2.3:a:gohugo:hugo:0.36.1
  • Gohugo » Hugo » Version: 0.37
    cpe:2.3:a:gohugo:hugo:0.37
  • Gohugo » Hugo » Version: 0.37.1
    cpe:2.3:a:gohugo:hugo:0.37.1
  • Gohugo » Hugo » Version: 0.38
    cpe:2.3:a:gohugo:hugo:0.38
  • Gohugo » Hugo » Version: 0.38.1
    cpe:2.3:a:gohugo:hugo:0.38.1
  • Gohugo » Hugo » Version: 0.38.2
    cpe:2.3:a:gohugo:hugo:0.38.2
  • Gohugo » Hugo » Version: 0.39
    cpe:2.3:a:gohugo:hugo:0.39
  • Gohugo » Hugo » Version: 0.40
    cpe:2.3:a:gohugo:hugo:0.40
  • Gohugo » Hugo » Version: 0.40.1
    cpe:2.3:a:gohugo:hugo:0.40.1
  • Gohugo » Hugo » Version: 0.40.2
    cpe:2.3:a:gohugo:hugo:0.40.2
  • Gohugo » Hugo » Version: 0.40.3
    cpe:2.3:a:gohugo:hugo:0.40.3
  • Gohugo » Hugo » Version: 0.41
    cpe:2.3:a:gohugo:hugo:0.41
  • Gohugo » Hugo » Version: 0.42
    cpe:2.3:a:gohugo:hugo:0.42
  • Gohugo » Hugo » Version: 0.42.1
    cpe:2.3:a:gohugo:hugo:0.42.1
  • Gohugo » Hugo » Version: 0.42.2
    cpe:2.3:a:gohugo:hugo:0.42.2
  • Gohugo » Hugo » Version: 0.43
    cpe:2.3:a:gohugo:hugo:0.43
  • Gohugo » Hugo » Version: 0.44
    cpe:2.3:a:gohugo:hugo:0.44
  • Gohugo » Hugo » Version: 0.45
    cpe:2.3:a:gohugo:hugo:0.45
  • Gohugo » Hugo » Version: 0.45.1
    cpe:2.3:a:gohugo:hugo:0.45.1
  • Gohugo » Hugo » Version: 0.46
    cpe:2.3:a:gohugo:hugo:0.46
  • Gohugo » Hugo » Version: 0.47
    cpe:2.3:a:gohugo:hugo:0.47
  • Gohugo » Hugo » Version: 0.47.1
    cpe:2.3:a:gohugo:hugo:0.47.1
  • Gohugo » Hugo » Version: 0.48
    cpe:2.3:a:gohugo:hugo:0.48
  • Gohugo » Hugo » Version: 0.49
    cpe:2.3:a:gohugo:hugo:0.49
  • Gohugo » Hugo » Version: 0.49.1
    cpe:2.3:a:gohugo:hugo:0.49.1
  • Gohugo » Hugo » Version: 0.49.2
    cpe:2.3:a:gohugo:hugo:0.49.2
  • Gohugo » Hugo » Version: 0.50
    cpe:2.3:a:gohugo:hugo:0.50
  • Gohugo » Hugo » Version: 0.51
    cpe:2.3:a:gohugo:hugo:0.51
  • Gohugo » Hugo » Version: 0.52
    cpe:2.3:a:gohugo:hugo:0.52
  • Gohugo » Hugo » Version: 0.53
    cpe:2.3:a:gohugo:hugo:0.53
  • Gohugo » Hugo » Version: 0.54.0
    cpe:2.3:a:gohugo:hugo:0.54.0
  • Gohugo » Hugo » Version: 0.55.0
    cpe:2.3:a:gohugo:hugo:0.55.0
  • Gohugo » Hugo » Version: 0.55.1
    cpe:2.3:a:gohugo:hugo:0.55.1
  • Gohugo » Hugo » Version: 0.55.2
    cpe:2.3:a:gohugo:hugo:0.55.2
  • Gohugo » Hugo » Version: 0.55.3
    cpe:2.3:a:gohugo:hugo:0.55.3
  • Gohugo » Hugo » Version: 0.55.4
    cpe:2.3:a:gohugo:hugo:0.55.4
  • Gohugo » Hugo » Version: 0.55.5
    cpe:2.3:a:gohugo:hugo:0.55.5
  • Gohugo » Hugo » Version: 0.55.6
    cpe:2.3:a:gohugo:hugo:0.55.6
  • Gohugo » Hugo » Version: 0.56.0
    cpe:2.3:a:gohugo:hugo:0.56.0
  • Gohugo » Hugo » Version: 0.56.1
    cpe:2.3:a:gohugo:hugo:0.56.1
  • Gohugo » Hugo » Version: 0.56.2
    cpe:2.3:a:gohugo:hugo:0.56.2
  • Gohugo » Hugo » Version: 0.56.3
    cpe:2.3:a:gohugo:hugo:0.56.3
  • Gohugo » Hugo » Version: 0.57.0
    cpe:2.3:a:gohugo:hugo:0.57.0
  • Gohugo » Hugo » Version: 0.57.1
    cpe:2.3:a:gohugo:hugo:0.57.1
  • Gohugo » Hugo » Version: 0.57.2
    cpe:2.3:a:gohugo:hugo:0.57.2
  • Gohugo » Hugo » Version: 0.58.0
    cpe:2.3:a:gohugo:hugo:0.58.0
  • Gohugo » Hugo » Version: 0.58.1
    cpe:2.3:a:gohugo:hugo:0.58.1
  • Gohugo » Hugo » Version: 0.58.2
    cpe:2.3:a:gohugo:hugo:0.58.2
  • Gohugo » Hugo » Version: 0.58.3
    cpe:2.3:a:gohugo:hugo:0.58.3
  • Gohugo » Hugo » Version: 0.59.0
    cpe:2.3:a:gohugo:hugo:0.59.0
  • Gohugo » Hugo » Version: 0.59.1
    cpe:2.3:a:gohugo:hugo:0.59.1
  • Gohugo » Hugo » Version: 0.60.0
    cpe:2.3:a:gohugo:hugo:0.60.0
  • Gohugo » Hugo » Version: 0.60.1
    cpe:2.3:a:gohugo:hugo:0.60.1
  • Gohugo » Hugo » Version: 0.61.0
    cpe:2.3:a:gohugo:hugo:0.61.0
  • Gohugo » Hugo » Version: 0.62.0
    cpe:2.3:a:gohugo:hugo:0.62.0
  • Gohugo » Hugo » Version: 0.62.1
    cpe:2.3:a:gohugo:hugo:0.62.1
  • Gohugo » Hugo » Version: 0.62.2
    cpe:2.3:a:gohugo:hugo:0.62.2
  • Gohugo » Hugo » Version: 0.63.0
    cpe:2.3:a:gohugo:hugo:0.63.0
  • Gohugo » Hugo » Version: 0.63.1
    cpe:2.3:a:gohugo:hugo:0.63.1
  • Gohugo » Hugo » Version: 0.63.2
    cpe:2.3:a:gohugo:hugo:0.63.2
  • Gohugo » Hugo » Version: 0.64.0
    cpe:2.3:a:gohugo:hugo:0.64.0
  • Gohugo » Hugo » Version: 0.64.1
    cpe:2.3:a:gohugo:hugo:0.64.1
  • Gohugo » Hugo » Version: 0.65.0
    cpe:2.3:a:gohugo:hugo:0.65.0
  • Gohugo » Hugo » Version: 0.65.1
    cpe:2.3:a:gohugo:hugo:0.65.1
  • Gohugo » Hugo » Version: 0.65.2
    cpe:2.3:a:gohugo:hugo:0.65.2
  • Gohugo » Hugo » Version: 0.65.3
    cpe:2.3:a:gohugo:hugo:0.65.3
  • Gohugo » Hugo » Version: 0.66.0
    cpe:2.3:a:gohugo:hugo:0.66.0
  • Gohugo » Hugo » Version: 0.67.0
    cpe:2.3:a:gohugo:hugo:0.67.0
  • Gohugo » Hugo » Version: 0.67.1
    cpe:2.3:a:gohugo:hugo:0.67.1
  • Gohugo » Hugo » Version: 0.68.0
    cpe:2.3:a:gohugo:hugo:0.68.0
  • Gohugo » Hugo » Version: 0.68.1
    cpe:2.3:a:gohugo:hugo:0.68.1
  • Gohugo » Hugo » Version: 0.68.2
    cpe:2.3:a:gohugo:hugo:0.68.2
  • Gohugo » Hugo » Version: 0.68.3
    cpe:2.3:a:gohugo:hugo:0.68.3
  • Gohugo » Hugo » Version: 0.69.0
    cpe:2.3:a:gohugo:hugo:0.69.0
  • Gohugo » Hugo » Version: 0.69.1
    cpe:2.3:a:gohugo:hugo:0.69.1
  • Gohugo » Hugo » Version: 0.69.2
    cpe:2.3:a:gohugo:hugo:0.69.2
  • Gohugo » Hugo » Version: 0.7
    cpe:2.3:a:gohugo:hugo:0.7
  • Gohugo » Hugo » Version: 0.70.0
    cpe:2.3:a:gohugo:hugo:0.70.0
  • Gohugo » Hugo » Version: 0.71.0
    cpe:2.3:a:gohugo:hugo:0.71.0
  • Gohugo » Hugo » Version: 0.71.1
    cpe:2.3:a:gohugo:hugo:0.71.1
  • Gohugo » Hugo » Version: 0.72.0
    cpe:2.3:a:gohugo:hugo:0.72.0
  • Gohugo » Hugo » Version: 0.73.0
    cpe:2.3:a:gohugo:hugo:0.73.0
  • Gohugo » Hugo » Version: 0.74.0
    cpe:2.3:a:gohugo:hugo:0.74.0
  • Gohugo » Hugo » Version: 0.74.1
    cpe:2.3:a:gohugo:hugo:0.74.1
  • Gohugo » Hugo » Version: 0.74.2
    cpe:2.3:a:gohugo:hugo:0.74.2
  • Gohugo » Hugo » Version: 0.74.3
    cpe:2.3:a:gohugo:hugo:0.74.3
  • Gohugo » Hugo » Version: 0.75.0
    cpe:2.3:a:gohugo:hugo:0.75.0
  • Gohugo » Hugo » Version: 0.75.1
    cpe:2.3:a:gohugo:hugo:0.75.1
  • Gohugo » Hugo » Version: 0.76.0
    cpe:2.3:a:gohugo:hugo:0.76.0
  • Gohugo » Hugo » Version: 0.76.1
    cpe:2.3:a:gohugo:hugo:0.76.1
  • Gohugo » Hugo » Version: 0.76.2
    cpe:2.3:a:gohugo:hugo:0.76.2
  • Gohugo » Hugo » Version: 0.76.3
    cpe:2.3:a:gohugo:hugo:0.76.3
  • Gohugo » Hugo » Version: 0.76.4
    cpe:2.3:a:gohugo:hugo:0.76.4
  • Gohugo » Hugo » Version: 0.76.5
    cpe:2.3:a:gohugo:hugo:0.76.5
  • Gohugo » Hugo » Version: 0.77.0
    cpe:2.3:a:gohugo:hugo:0.77.0
  • Gohugo » Hugo » Version: 0.78.0
    cpe:2.3:a:gohugo:hugo:0.78.0
  • Gohugo » Hugo » Version: 0.78.1
    cpe:2.3:a:gohugo:hugo:0.78.1
  • Gohugo » Hugo » Version: 0.78.2
    cpe:2.3:a:gohugo:hugo:0.78.2
  • Gohugo » Hugo » Version: 0.79.0
    cpe:2.3:a:gohugo:hugo:0.79.0
  • Gohugo » Hugo » Version: 0.8
    cpe:2.3:a:gohugo:hugo:0.8
  • Gohugo » Hugo » Version: 0.9
    cpe:2.3:a:gohugo:hugo:0.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved