Hashbrowncms Hashbrown Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Hashbrowncms Hashbrown Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-6948 — CVSS 9.8 (critical): A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a…
• CVE-2020-6949 — CVSS 8.8 (high): A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password…
• CVE-2020-5840 — CVSS 7.5 (high): An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory…