Openmediavault
Approved changes feed: RSS · Atom
cpe:2.3:a:openmediavault:openmediavault:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openmediavault (ad97a4d0-df27-55a9-80f8-651662d7f640) |
|---|---|
| Product | Openmediavault (25b939c0-2d6a-5b6d-ad03-004088adeb4b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openmediavault/openmediavault |
purl2cpe | 2026-06-01 10:13:06.056613 |
pkg:sourceforge/openmediavault |
purl2cpe | 2026-06-01 10:13:06.056616 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-26124 |
vulnerable | 2026-06-08 05:23:49.994061 |
Details available
openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.php, because json_encode_safe is not used in config/databasebackend.inc. Successful exploitation allows arbitrary command execution on the underlying operating system as root.
Published: 2020-10-02T08:28:03.000Z
Updated: 2024-08-04T15:49:07.113Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.