p PatchFirst

CVE-2020-13124

CVE-2020-13124

This page contains facts from public vulnerability sources. Check the original advisory before updating.

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.

CVSS 8.8 · High · EPSS 4.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • sabnzbdplus Debian:12

    Versions
    • 0.4.11-1
    • 0.4.12-1
    • 0.4.9-1
    • 0.5.0-1
    • 0.5.0-2
    • 0.5.2-1
    • 0.5.3-1
    • 0.5.4-1
    • 0.5.5-1
    • 0.5.6-1
    • 0.6.10-1
    • 0.6.14-1
    • 0.6.15-1
    • 0.6.2-1
    • 0.6.4-1
    • 0.6.6-1
    • 0.6.7-1
    • 0.6.8-1
    • 0.6.9-1
    • 0.7.11-1
    • 0.7.13-1
    • 0.7.16-1
    • 0.7.18-1
    • 0.7.2-1
    • 0.7.20+dfsg-1
    • 0.7.20-1
    • 0.7.3-1
    • 0.7.4-1
    • 0.7.5-1
    • 0.7.6-1
    • 0.7.8-1
    • 0.7.9-1
    • 1.0.2+dfsg-1
    • 1.0.3+dfsg-1
    • 1.0.3+dfsg-2
    • 1.1.1+dfsg-1
    • 2.3.1+dfsg-1
    • 2.3.2+dfsg-1
    • 2.3.4+dfsg-1
    • 2.3.6+dfsg-1
    • 3.0.0~0git20200408+dfsg-1
    Affected ranges
    • ECOSYSTEM: < 3.1.1+dfsg-1

    Update to 3.1.1+dfsg-1

  • sabnzbdplus Debian:13

    Versions
    • 0.4.11-1
    • 0.4.12-1
    • 0.4.9-1
    • 0.5.0-1
    • 0.5.0-2
    • 0.5.2-1
    • 0.5.3-1
    • 0.5.4-1
    • 0.5.5-1
    • 0.5.6-1
    • 0.6.10-1
    • 0.6.14-1
    • 0.6.15-1
    • 0.6.2-1
    • 0.6.4-1
    • 0.6.6-1
    • 0.6.7-1
    • 0.6.8-1
    • 0.6.9-1
    • 0.7.11-1
    • 0.7.13-1
    • 0.7.16-1
    • 0.7.18-1
    • 0.7.2-1
    • 0.7.20+dfsg-1
    • 0.7.20-1
    • 0.7.3-1
    • 0.7.4-1
    • 0.7.5-1
    • 0.7.6-1
    • 0.7.8-1
    • 0.7.9-1
    • 1.0.2+dfsg-1
    • 1.0.3+dfsg-1
    • 1.0.3+dfsg-2
    • 1.1.1+dfsg-1
    • 2.3.1+dfsg-1
    • 2.3.2+dfsg-1
    • 2.3.4+dfsg-1
    • 2.3.6+dfsg-1
    • 3.0.0~0git20200408+dfsg-1
    Affected ranges
    • ECOSYSTEM: < 3.1.1+dfsg-1

    Update to 3.1.1+dfsg-1

  • sabnzbdplus Debian:14

    Versions
    • 0.4.11-1
    • 0.4.12-1
    • 0.4.9-1
    • 0.5.0-1
    • 0.5.0-2
    • 0.5.2-1
    • 0.5.3-1
    • 0.5.4-1
    • 0.5.5-1
    • 0.5.6-1
    • 0.6.10-1
    • 0.6.14-1
    • 0.6.15-1
    • 0.6.2-1
    • 0.6.4-1
    • 0.6.6-1
    • 0.6.7-1
    • 0.6.8-1
    • 0.6.9-1
    • 0.7.11-1
    • 0.7.13-1
    • 0.7.16-1
    • 0.7.18-1
    • 0.7.2-1
    • 0.7.20+dfsg-1
    • 0.7.20-1
    • 0.7.3-1
    • 0.7.4-1
    • 0.7.5-1
    • 0.7.6-1
    • 0.7.8-1
    • 0.7.9-1
    • 1.0.2+dfsg-1
    • 1.0.3+dfsg-1
    • 1.0.3+dfsg-2
    • 1.1.1+dfsg-1
    • 2.3.1+dfsg-1
    • 2.3.2+dfsg-1
    • 2.3.4+dfsg-1
    • 2.3.6+dfsg-1
    • 3.0.0~0git20200408+dfsg-1
    Affected ranges
    • ECOSYSTEM: < 3.1.1+dfsg-1

    Update to 3.1.1+dfsg-1

  • sabnzbdplus Ubuntu:16.04:LTS

    Versions
    • 0.7.20-1
    • 0.7.20+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sabnzbdplus Ubuntu:18.04:LTS

    Versions
    • 1.1.1+dfsg-1
    • 2.3.1+dfsg-1
    • 2.3.2+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sabnzbdplus Ubuntu:20.04:LTS

    Versions
    • 2.3.6+dfsg-1
    • 2.3.6+dfsg-1build1
    • 2.3.6+dfsg-1ubuntu1
    • 3.0.0~0git20200408+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sabnzbdplus Ubuntu:22.04:LTS

    Versions
    • 3.2.1+dfsg-1
    • 3.4.2+dfsg-1
    • 3.4.2+dfsg-2
    • 3.5.0+dfsg-1
    • 3.5.0+dfsg-2
    • 3.5.1+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sabnzbdplus Ubuntu:24.04:LTS

    Versions
    • 4.0.2+dfsg-1
    • 4.1.0+dfsg-1
    • 4.2.2+dfsg-2
    • 4.2.2+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sabnzbdplus Ubuntu:25.10

    Versions
    • 4.4.1+dfsg-2
    • 4.5.0+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sabnzbdplus Ubuntu:26.10

    Versions
    • 4.5.4+dfsg-4
    • 5.0.4+dfsg-1
    • 5.1.1+dfsg-1
    • 5.1.3+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • sabnzbdplus Ubuntu:26.04:LTS

    Versions
    • 4.5.0+dfsg-1
    • 4.5.4+dfsg-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →