coldbraid

CVE-2020-5847 Unraid Unraid

Unraid contains a vulnerability due to the insecure use of the extract PHP function that can be abused to execute remote code as root. This CVE is chainable with CVE-2020-5849 for initial access.

CVSS
not scored

On CISA’s exploited list

Unraid Remote Code Execution Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known