What’s Vulnerable › Vulnerabilities

CVE-2020-15951

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-11-05 · updated 2026-06-17
• Weakness: CWE-79

Description

Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject arbitrary HTML content that is rendered as part of the application. An attacker could leverage this to redirect application users to a phishing website in an attempt to steal credentials.

Affected products

• Immuta: 2.8.2

References

• https://labs.bishopfox.com/advisories
• https://labs.bishopfox.com/advisories/immuta-version-2.8.2
• https://www.immuta.com/
• https://labs.bishopfox.com/advisories
• https://labs.bishopfox.com/advisories/immuta-version-2.8.2
• https://www.immuta.com/

Get alerted when CVE-2020-15951 or the next vulnerability affects your stack