Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2020-35846

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2020-35846.

Coverage Span: 2021-04-13
Reports: 1 related reports

Associated Reports & Timeline

A vulnerability chain in open-source CMS Cockpit: unauthenticated NoSQL injections (CVE-2020-35846) allow username extraction through blind $eq and $regex techniques, escalating to take over any user account and finally to remote code execution.