CVE-2020-7677
HighPublic PoC
Published: 25 July 2022
Published
25 July 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
EPSS Score
0.0147
81.4th percentile
Risk Priority
18
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2020-7677 is a high-severity an unspecified weakness vulnerability in Fedoraproject Fedora. Its CVSS base score is 8.6 (High).
Operationally, ranked in the top 18.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-6206
Vulnerability details
This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
thenify project
thenify
≤ 3.3.1
debian
debian linux
10.0
fedoraproject
fedora
36, 37
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.