CVE

CVE-2020-15227

9.8

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

application

Updated Sep 28, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~15 seconds

CVE-2020-15227 Scanner

Detects 'Remote Code Execution (RCE)' vulnerability in Nette affects v. before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6.

Used 3.4k times · 4.3k assets checked · url

Scanner page →Run scanner

CVE history: application

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →