CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7799

An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.727

EPSS Ranking 98.7%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 9.0

References

Products affected by CVE-2020-7799

Fusionauth » Fusionauth » Version: 1.0.13

cpe:2.3:a:fusionauth:fusionauth:1.0.13
Fusionauth » Fusionauth » Version: 1.0.14

cpe:2.3:a:fusionauth:fusionauth:1.0.14
Fusionauth » Fusionauth » Version: 1.0.15

cpe:2.3:a:fusionauth:fusionauth:1.0.15
Fusionauth » Fusionauth » Version: 1.0.16

cpe:2.3:a:fusionauth:fusionauth:1.0.16
Fusionauth » Fusionauth » Version: 1.0.17

cpe:2.3:a:fusionauth:fusionauth:1.0.17
Fusionauth » Fusionauth » Version: 1.0.18

cpe:2.3:a:fusionauth:fusionauth:1.0.18
Fusionauth » Fusionauth » Version: 1.1.0

cpe:2.3:a:fusionauth:fusionauth:1.1.0
Fusionauth » Fusionauth » Version: 1.1.1

cpe:2.3:a:fusionauth:fusionauth:1.1.1
Fusionauth » Fusionauth » Version: 1.10.0

cpe:2.3:a:fusionauth:fusionauth:1.10.0
Fusionauth » Fusionauth » Version: 1.10.1

cpe:2.3:a:fusionauth:fusionauth:1.10.1
Fusionauth » Fusionauth » Version: 1.2.0

cpe:2.3:a:fusionauth:fusionauth:1.2.0
Fusionauth » Fusionauth » Version: 1.2.1

cpe:2.3:a:fusionauth:fusionauth:1.2.1
Fusionauth » Fusionauth » Version: 1.2.2

cpe:2.3:a:fusionauth:fusionauth:1.2.2
Fusionauth » Fusionauth » Version: 1.3.0

cpe:2.3:a:fusionauth:fusionauth:1.3.0
Fusionauth » Fusionauth » Version: 1.3.1

cpe:2.3:a:fusionauth:fusionauth:1.3.1
Fusionauth » Fusionauth » Version: 1.4.0

cpe:2.3:a:fusionauth:fusionauth:1.4.0
Fusionauth » Fusionauth » Version: 1.5.0

cpe:2.3:a:fusionauth:fusionauth:1.5.0
Fusionauth » Fusionauth » Version: 1.6.0

cpe:2.3:a:fusionauth:fusionauth:1.6.0
Fusionauth » Fusionauth » Version: 1.6.1

cpe:2.3:a:fusionauth:fusionauth:1.6.1
Fusionauth » Fusionauth » Version: 1.7.0

cpe:2.3:a:fusionauth:fusionauth:1.7.0
Fusionauth » Fusionauth » Version: 1.7.1

cpe:2.3:a:fusionauth:fusionauth:1.7.1
Fusionauth » Fusionauth » Version: 1.7.2

cpe:2.3:a:fusionauth:fusionauth:1.7.2
Fusionauth » Fusionauth » Version: 1.7.3

cpe:2.3:a:fusionauth:fusionauth:1.7.3
Fusionauth » Fusionauth » Version: 1.7.4

cpe:2.3:a:fusionauth:fusionauth:1.7.4
Fusionauth » Fusionauth » Version: 1.9.0

cpe:2.3:a:fusionauth:fusionauth:1.9.0
Fusionauth » Fusionauth » Version: 1.9.1

cpe:2.3:a:fusionauth:fusionauth:1.9.1
Fusionauth » Fusionauth » Version: 1.9.2

cpe:2.3:a:fusionauth:fusionauth:1.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-7799

Products

Pricing

Contact Us