CVE-2020-25490

ALTO 7.3CVE-2020-25490 · Published 17/09/2020 · updated 17/06/2026

In breve

CVE-2020-25490 è una vulnerabilità ALTO (CVSS 7.3) che riguarda php microagent (sqreen).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.1% delle vulnerabilità.
Correzione: aggiornare a 1.16.0 o successiva.

Package	Affected versions	Patched versions
php microagent sqreen	`< 1.16.0`	`1.16.0`

Description

Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine.

References

blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free