Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2020-27637

Published: 12/01/2021 Updated: 06/01/2024
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to R-project

Vulnerability Summary

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages() function from the interpreter. Update to version 4.0.3

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

r-project cran

Vendor Advisories

Arch Linux Issues:
The R programming language's default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise This vulnerability affects packages installed via the R CMD install cli command or the installpackages() function from the interpreter The issue is fixed in version 403 ...

References

CWE-22https://www.r-project.org/foundation/https://labs.bishopfox.com/advisories/cran-version-4.0.2https://security.gentoo.org/glsa/202401-07https://nvd.nist.govhttps://security.archlinux.org/CVE-2020-27637
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook