Vulnerability Description
Sickbeard alpha contains a remote command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands through the extra scripts configuration. Attackers can set malicious commands in the extra scripts field and trigger processing to execute remote code on the vulnerable Sickbeard installation.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/midgetspy/Sick-Beard
- https://web.archive.org/web/20190722085652/https://sickbeard.com/
- https://www.exploit-db.com/exploits/48646
- https://www.vulncheck.com/advisories/sickbeard-remote-command-injection
FAQ
What is CVE-2020-37027?
CVE-2020-37027 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Sickbeard alpha contains a remote command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands through the extra scripts configuration. Attackers can set malicio...
How severe is CVE-2020-37027?
CVE-2020-37027 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-37027?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.