Skip to content
OpenAdvisories
High DLA-2617-1 1 CVE

php-nette - security update

Published Apr 4, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 php-nette 2.4-20160731-1+deb9u1

Vulnerabilities 1

  • High 8.7
    CVE-2020-15227 Public exploit Scanner template EPSS 34%

    Remote Code Execution vulnerability

    Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

    nette application php-nette nette/application Ubuntu Packagist