CVE-2020-7697

CVE-2020-7697 is a critical command injection vulnerability affecting all versions of the mock2easy package. A remote unauthenticated attacker can inject arbitrary commands through the _data variable, specifically within the interfaceUrl parameter, leading to full compromise of the affected system. This vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the high severity warrants immediate patching.