CVE-2020-7838: Onstove Stove

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.

Affected products

• Onstove Stove: from 0.0.4.10, up to and including 0.0.4.71

Published 2020-12-18. Last modified 2026-06-17.