Skip to content
OpenAdvisories

Package · npm

hashbrown-cms

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2020-6948

    HashBrown CMS RCE

    A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password.

    hashbrown-cms npm
  • High 7.5
    CVE-2020-5840

    HashBrown CMS Directory Traversal

    An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field.

    hashbrown-cms npm