Hashbrown Cms

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:hashbrowncms:hashbrown_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHashbrowncms (35a6657a-f44a-5320-b8a3-cccf00b504c2)
ProductHashbrown Cms (fcb50244-6be2-58f9-8b07-3e9cbf4ab8a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/hashbrowncms/hashbrown-cms purl2cpe 2026-06-01 10:18:07.363951

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6949 vulnerable 2026-06-08 05:27:11.267930 Details available
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure that account.
Published: 2020-01-13T18:58:45.000Z
Updated: 2024-08-04T09:18:02.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6948 vulnerable 2026-06-08 05:27:11.267432 Details available
A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password.
Published: 2020-01-13T18:58:59.000Z
Updated: 2024-08-04T09:18:02.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5840 vulnerable 2026-06-08 05:26:43.958282 Details available
An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field.
Published: 2020-01-06T17:21:07.000Z
Updated: 2024-08-04T08:39:25.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.