PT-2020-13657 · Sabberworm+2 · Sabberworm Php Css Parser+2

Sabberworm · Published 2020-06-03 · Updated 2025-10-14 · CVE-2020-13756

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sabberworm PHP CSS Parser versions prior to 8.3.1 php-horde-css-parser version 1.0.8-1ubuntu1+esm1 and earlier

Description The issue is related to the parsing of uncontrolled CSS data, which could lead to remote code execution. The functions allSelectors() or getSelectorsBySpecificity() are called with input from an attacker, possibly resulting in code injection.

Recommendations For Sabberworm PHP CSS Parser versions prior to 8.3.1, update to version 8.3.1 or later to fix the vulnerability. For php-horde-css-parser version 1.0.8-1ubuntu1+esm1 and earlier, run sudo pro fix USN-7502-1 to fix the vulnerability, and update the system to the package version php-horde-css-parser - 1.0.8-1ubuntu1+esm1. As a temporary workaround, consider disabling the functions allSelectors() or getSelectorsBySpecificity() until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

CWE-20

Related Identifiers

CVE-2020-13756

DLA-4333-1

GHSA-PHRQ-V4Q2-HMQ6

USN-7502-1

Affected Products

Debian

Sabberworm Php Css Parser

Ubuntu

References · 25

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/sabberworm/php-css-parser/CVE-2020-13756.yaml · Exploit
• 🔥 http://packetstormsecurity.com/files/157923/Sabberworm-PHP-CSS-Code-Injection.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2020/Jun/7 · Exploit
• https://github.com/sabberworm/PHP-CSS-Parser/commit/2ebf59e8bfbf6cfc1653a5f0ed743b95062c62a4 · Patch
• https://osv.dev/vulnerability/CVE-2020-13756 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13756 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-13756 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7502-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7502-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-phrq-v4q2-hmq6 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-13756 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-13756 · Security Note
• https://osv.dev/vulnerability/DLA-4333-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-13756 · Vendor Advisory