{"cvss":9.8,"datePublished":"2021-12-10","dateUpdated":"2021-12-10","description":"FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.","dueDate":"2022-06-10","id":"CVE-2020-17463","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17463","product":"Fuel CMS","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Fuel CMS SQL Injection Vulnerability","vendor":"Fuel CMS"}