CVE-2020-29007

CRITICAL

Mediawiki Score < 0.3.0 - Code Injection

Title source: rule

Description

The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. This allows any user with an ability to edit articles (potentially including unauthenticated anonymous users) to execute arbitrary Scheme or shell code by using crafted {{Image data to generate musical scores containing malicious code.

Exploits (1)

nomisec WRITEUP
by seqred-s-a · poc
https://github.com/seqred-s-a/cve-2020-29007

References (5)

Scores

CVSS v3 9.8
EPSS 0.1736
EPSS Percentile 95.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-94
Status published
Products (1)
mediawiki/score < 0.3.0
Published Apr 15, 2023
Tracked Since Feb 18, 2026