{"id":"DEBIAN-CVE-2020-15591","details":"fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20160919_2 allows eval injection (for unauthenticated remote code execution).","modified":"2026-09-01T16:04:56.971000694Z","published":"2022-03-17T16:15:07.430Z","upstream":["CVE-2020-15591"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2020-15591"}],"affected":[{"package":{"name":"fex","ecosystem":"Debian:12","purl":"pkg:deb/debian/fex?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20160919-2"}]}],"versions":["20110601-1","20110608-1","20110608-2","20110610-1","20110610-2","20110620-1","20110622-1","20110726-1","20110726-1~bpo60+1","20111129-1","20111129-2","20120215-1","20120215-2","20120215-3","20120215-3~bpo60+1","20120718-1","20120718-2","20120718-3","20120718-4","20120718-5","20120930-1","20121027-1","20121107-1","20121107-1~bpo60+1","20130217-1","20130510-1","20130805-1","20140226-1","20140313-1","20140530-1","20140806-1","20140818-1","20140902-1","20140902-1~bpo70+1","20140902-2","20140917-1","20140917-1~bpo70+1","20140917-2","20150120-1","20150120-2","20150729-1","20150826-1","20160104-1","20160328-1","20160919-1","20160919-2~deb10u1","20160919-2~deb9u1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-15591.json"}},{"package":{"name":"fex","ecosystem":"Debian:13","purl":"pkg:deb/debian/fex?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20160919-2"}]}],"versions":["20110601-1","20110608-1","20110608-2","20110610-1","20110610-2","20110620-1","20110622-1","20110726-1","20110726-1~bpo60+1","20111129-1","20111129-2","20120215-1","20120215-2","20120215-3","20120215-3~bpo60+1","20120718-1","20120718-2","20120718-3","20120718-4","20120718-5","20120930-1","20121027-1","20121107-1","20121107-1~bpo60+1","20130217-1","20130510-1","20130805-1","20140226-1","20140313-1","20140530-1","20140806-1","20140818-1","20140902-1","20140902-1~bpo70+1","20140902-2","20140917-1","20140917-1~bpo70+1","20140917-2","20150120-1","20150120-2","20150729-1","20150826-1","20160104-1","20160328-1","20160919-1","20160919-2~deb10u1","20160919-2~deb9u1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-15591.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}