CVE-2010-20120

CVE-2010-20120 describes a critical vulnerability in Maple versions up to and including 13, where its Maplet framework allows automatic execution of embedded commands within .maplet files. This bypasses standard security, enabling attackers to execute arbitrary code without user interaction. The vulnerability has a CVSS 4.0 score of 8.4 (HIGH), indicating a low attack complexity and high impact on confidentiality, integrity, and availability if exploited. While not actively exploited in the wild, a Metasploit module exists, and the CVE has garnered significant community discussion, suggesting awareness and potential for future exploitation.