[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8T3u97w12nI_O_AKjkmofjNJzNN0OCkBU6lxqI1SyWY":3,"g5a-risk:CVE-2020-36388":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":39,"epssPercentile":25,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":47,"references":48,"referencesCount":60,"weaknesses":61,"weaknessesCount":47,"isActivelyExploited":70,"cisaInfo":25,"otxData":25,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":110,"notableEvents":111},"CVE-2020-36388","What is CVE-2020-36388?","In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive.","2021-06-17T19:15:07.793","2023-02-03T19:12:49.4",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[29],{"Source":16,"Type":17,"CVSSData":30,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":20,"AccessComplexity":21,"Authentication":33,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.01438,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"civicrm","*","cpe:2.3:a:civicrm:civicrm:*:*:*:*:*:*:*:*",1,[49,55],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fblog.sonarsource.com\u002Fcivicrm-code-execution-vulnerability-chain-explained\u002F","Sonarsource",[53,54],"Exploit","Third Party Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fcivicrm.org\u002Fadvisory\u002Fcivi-sa-2020-03","Civicrm",[59],"Vendor Advisory",2,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2020-36388? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-36388, a high severity cyber security vulnerability from 2021. In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5...","CVE-2020-36388, CVE-2020-36388 vulnerability, CVE-2020-36388 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, civicrm security, civicrm vulnerability","\u002Fwhat-is\u002Fcve-2020-36388",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":9,"dateModified":10,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-36388","Cybersecurity","CVE-2020-36388, CVE-2020-36388 vulnerability, CVE-2020-36388 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":25,"Negate":25,"Nodes":99},[100],{"Operator":101,"Negate":25,"CPEMatch":102},"OR",[103,106],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":105,"VersionEndIncluding":25},"02BA788A-BED3-48F9-ABD9-23B485885D21","5.21.3",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":107,"VersionStartExcluding":25,"VersionStartIncluding":108,"VersionEndExcluding":109,"VersionEndIncluding":25},"67868FBE-EF41-40E1-9DE8-7AB943AD4996","5.22.0","5.24.3",[],[],{"lastModified":10,"cacheTime":113,"version":31},1792375413729,{"score":115,"band":116,"action":117,"scoredAt":118},51,"Medium","Plan remediation","2026-10-16T06:51:24.017099+00:00"]