{
  "cveId": "CVE-2020-15227",
  "url": "https://patchblox.com/security/cve/CVE-2020-15227",
  "summary": "CVE-2020-15227 is fixed in php-nette on 1 platform by php-nette 2.4-20160731-1ubuntu0.1 (version 2.4-20160731-1ubuntu0.1), released October 1, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "php-nette: Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by pas...",
  "description": "Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.",
  "published": "2020-10-01T12:15:00Z",
  "severity": "Medium",
  "epss": 0.34424,
  "epssPercentile": 0.98424,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "php-nette",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4-20160731-1ubuntu0.1",
      "fix": "php-nette 2.4-20160731-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-php-nette-2.4-20160731-1ubuntu0.1",
      "released": "2020-10-01T12:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}