An information disclosure and remote code execution... · CVE-2020-6932 · GitHub Advisory Database · GitHub

An information disclosure and remote code execution...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Aug 22, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.

References

Published by the National Vulnerability Database

Aug 12, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Aug 22, 2025

Weaknesses

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Learn more on MITRE.

CWE-150

Improper Neutralization of Escape, Meta, or Control Sequences

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as escape, meta, or control character sequences when they are sent to a downstream component. Learn more on MITRE.