CVE-2020-13756
CRITICALCVSS 9.8/10EPSS 55.08%
Last modified
CVE-2020-13756 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called with input from an attacker.. EPSS estimates a 55.08% chance of exploitation in the next 30 days.
Description
Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called with input from an attacker.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sabberworm | Php Css Parser | < 8.3.1 |
References
- http://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Jun/7Exploit, Mailing List, Third Party Advisory
- https://github.com/sabberworm/PHP-CSS-Parser/commit/2ebf59e8bfbf6cfc1653a5f0ed743b95062c62a4Patch, Third Party Advisory
- https://github.com/sabberworm/PHP-CSS-Parser/releases/tag/8.3.1Release Notes, Third Party Advisory
- http://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Jun/7Exploit, Mailing List, Third Party Advisory
- https://github.com/sabberworm/PHP-CSS-Parser/commit/2ebf59e8bfbf6cfc1653a5f0ed743b95062c62a4Patch, Third Party Advisory
- https://github.com/sabberworm/PHP-CSS-Parser/releases/tag/8.3.1Release Notes, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-13756?
Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelectorsBySpecificity() is called with input from an attacker.
How severe is CVE-2020-13756?
CVE-2020-13756 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 55.08% probability of exploitation in the next 30 days.
How do I fix CVE-2020-13756?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-1375An elevation of privilege vulnerability exists when Windows …7.8
- CVE-2020-13750Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-13751Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-13752Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-13753The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to…10
- CVE-2020-13754hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger…6.7
- CVE-2020-13757Python-RSA before 4.1 ignores leading '\0' bytes during decr…7.5
- CVE-2020-13758modules/security/classes/general.post_filter.php/post_filter…6.1
- CVE-2020-13759rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allow…7.5
- CVE-2020-1376<p>An elevation of privilege vulnerability exists in the way…7.8
- CVE-2020-13760In Joomla! before 3.9.19, missing token checks in com_postin…8.8
- CVE-2020-13761In Joomla! before 3.9.19, lack of input validation in the he…6.1
Are you affected by CVE-2020-13756?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST