Skip to content
OpenAdvisories

Vendor

HashBrownCMS

2 known vulnerabilities.

Products

hashbrown-cms 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-70375

    HashBrown CMS - OS Command Injection via Git Deployer Branch Field

    HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/Deployer/GitDeployer.js executes AppService.exec, interpolating the configured branch value directly i…

    HashBrownCMS hashbrown-cms
  • High 8.8
    CVE-2026-70374

    HashBrown CMS - OS Command Injection in Media Upload Thumbnail Generation

    HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail generation routine. Media.generateThumbnail in src/Server/Entity/Resource/Media.js builds a temporary file path as 'thumbnail' + Path.extname(fil…

    HashBrownCMS hashbrown-cms