CVE-2020-15952

CRITICAL 9.0CVE-2020-15952 · Published 05/11/2020 · updated 17/06/2026

In short

CVE-2020-15952 is a CRITICAL (CVSS 9.0) vulnerability affecting immuta (immuta).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
immuta immuta	`= 2.8.2`	No fix yet

Description

Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immuta users to steal credentials or force actions on authenticated users through reflected, DOM-based XSS.

References

labs.bishopfox.com/advisories · Exploit
labs.bishopfox.com/advisories/immuta-version-2.8.2 · Release Notes
immuta.com · Product

More vulnerabilities in immuta

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free