CVE-2020-7620: Netease Pomelo-Monitor

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.

Affected products

• Netease Pomelo-Monitor: up to and including 0.3.7

Published 2020-04-02. Last modified 2026-06-17.