CVE-2020-15690
- State
- Published
- Severity
- Not scored
- Published
- Jan 30, 2021
- Updated
- Aug 4, 2024
- Reserved
- Jul 13, 2020
Description
In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/nim-lang/Nim/blob/dc5a40f3f39c6ea672e6dc6aca7f8118a69dda99/lib/pure/asyncftpclient.nim#L145
- https://github.com/nim-lang/Nim/compare/v1.2.4...v1.2.6
- https://consensys.net/diligence/vulnerabilities/nim-asyncftpd-crlf-injection/
- https://github.com/tintinweb/pub/tree/master/pocs/cve-2020-15690
- [oss-security] 20210204 [CVE-2020-15690] Nim - stdlib asyncftpd - Crlf Injectionmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.