CVE-2017-20028

Source
https://cve.org/CVERecord?id=CVE-2017-20028
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-20028.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-20028
Published
2022-06-09T23:15:08Z
Modified
2026-08-07T11:31:23Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. It is recommended to upgrade the affected component.

Database specific
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:humhub:humhub:1.0.0:beta3:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "1.0.0-beta3"
                },
                {
                    "last_affected": "1.0.0-beta3"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "humhub:humhub"
        }
    ]
}
References

Affected packages

Git / github.com/humhub/humhub

Affected ranges

Type
GIT
Repo
https://github.com/humhub/humhub
Events
Database specific
Show details
{
    "cpe": "cpe:2.3:a:humhub:humhub:0.20.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.20.1"
        },
        {
            "last_affected": "0.20.1"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

0.*
0.20.1
v0.*
v0.20.1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-20028.json"