CVE-2020-27637 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Arbitrary code execution |
| Description | The R programming language's default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages() function from the interpreter. The issue is fixed in version 4.0.3. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1436 | r | 4.0.2-1 | 4.0.3-1 | Medium | Fixed |
| References |
|---|
https://labs.bishopfox.com/advisories/cran-version-4.0.2 |