CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 19.9% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2020-13925
Severity
CRITICAL
CVSS
9.8
EPSS
19.86%
Original NVD Description
Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all previous versions after 2.3 should upgrade to 3.1.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)