CRITICAL🇵🇱 Wersja polska

CVE-2020-13802

CVSS 9.8v3.1pub. 2020-09-02upd. 2024-11-21

Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Erlang Rebar3

    APP
    Erlang
    3.0.03.1.0 – 3.13.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2019-1000014HIGH8.8same product

Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry veri...

CVE-2026-21619LOW2.0same product

Podatność Uncontrolled Resource Consumption oraz Deserialization of Untrusted Data w modułach hex_api bibliote...

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same vendor

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2026-55953CRITICAL9.1same vendor

The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the...

CVE-2022-37026CRITICAL9.8PL ✓same vendor

Erlang/OTP – obejście uwierzytelniania klienta w SSL/TLS/DTLS