Back to the CVE list
CVE-2020-1147 CISA KEV · Actively exploited

dotnet: XML source markup processing remote code execution

CVSS score

8.8

EPSS probability

%94.0

Risk score

16.5

Published

6 y ago

OverviewPublic Exploits (2)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2020-1147 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core application.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2020-1147 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.src View
2Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.x86_64 View
3Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.src View
4Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.x86_64 View
5Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.516-1.el7.x86_64 View
6Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.20-1.el7.x86_64 View
7Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.20-1.el7.x86_64 View
8Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.516-1.el7.x86_64 View
9Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.516-1.el7.x86_64 View
10Red Hat7ComputeNode-dotNET-2.1:rh-dotnet21-runtime-0:2.1-19.el7.x86_64 View
11Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.6-1.el7.x86_64 View
12Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 View
13Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.src View
14Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.x86_64 View
15Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.6-1.el7.x86_64 View
16Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.106-1.el7.x86_64 View
17Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.6-1.el7.x86_64 View
18Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.6-1.el7.x86_64 View
19Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.6-1.el7.x86_64 View
20Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.106-1.el7.x86_64 View
21Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 View
22Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.106-1.el7.x86_64 View
23Red Hat7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.106-1.el7.x86_64 View
24Red Hat7Server-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.src View
25Red Hat7Server-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.x86_64 View
26Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.src View
27Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.x86_64 View
28Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.516-1.el7.x86_64 View
29Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.20-1.el7.x86_64 View
30Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.20-1.el7.x86_64 View
31Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.516-1.el7.x86_64 View
32Red Hat7Server-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.516-1.el7.x86_64 View
33Red Hat7Server-dotNET-2.1:rh-dotnet21-runtime-0:2.1-19.el7.x86_64 View
34Red Hat7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.6-1.el7.x86_64 View
35Red Hat7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 View
36Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.src View
37Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.x86_64 View
38Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.6-1.el7.x86_64 View
39Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.106-1.el7.x86_64 View
40Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.6-1.el7.x86_64 View
41Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.6-1.el7.x86_64 View
42Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.6-1.el7.x86_64 View
43Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.106-1.el7.x86_64 View
44Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 View
45Red Hat7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.106-1.el7.x86_64 View
46Red Hat7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.106-1.el7.x86_64 View
47Red Hat7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.src View
48Red Hat7Workstation-dotNET-2.1:rh-dotnet21-0:2.1-19.el7.x86_64 View
49Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.src View
50Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-0:2.1.516-1.el7.x86_64 View
51Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-debuginfo-0:2.1.516-1.el7.x86_64 View
52Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-host-0:2.1.20-1.el7.x86_64 View
53Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-runtime-2.1-0:2.1.20-1.el7.x86_64 View
54Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1-0:2.1.516-1.el7.x86_64 View
55Red Hat7Workstation-dotNET-2.1:rh-dotnet21-dotnet-sdk-2.1.5xx-0:2.1.516-1.el7.x86_64 View
56Red Hat7Workstation-dotNET-2.1:rh-dotnet21-runtime-0:2.1-19.el7.x86_64 View
57Red Hat7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.6-1.el7.x86_64 View
58Red Hat7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 View
59Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.src View
60Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.106-1.el7.x86_64 View
61Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.6-1.el7.x86_64 View
62Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.106-1.el7.x86_64 View
63Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.6-1.el7.x86_64 View
64Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.6-1.el7.x86_64 View
65Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.6-1.el7.x86_64 View
66Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.106-1.el7.x86_64 View
67Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.6-1.el7.x86_64 View
68Red Hat7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.106-1.el7.x86_64 View
69Red Hat7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.106-1.el7.x86_64 View
70Red HatAppStream-8.0.0.Z.E4S:dotnet-0:2.1.516-1.el8_0.src View
71Red HatAppStream-8.0.0.Z.E4S:dotnet-0:2.1.516-1.el8_0.x86_64 View
72Red HatAppStream-8.0.0.Z.E4S:dotnet-debuginfo-0:2.1.516-1.el8_0.x86_64 View
73Red HatAppStream-8.0.0.Z.E4S:dotnet-debugsource-0:2.1.516-1.el8_0.x86_64 View
74Red HatAppStream-8.0.0.Z.E4S:dotnet-host-0:2.1.20-1.el8_0.x86_64 View
75Red HatAppStream-8.0.0.Z.E4S:dotnet-host-debuginfo-0:2.1.20-1.el8_0.x86_64 View
76Red HatAppStream-8.0.0.Z.E4S:dotnet-host-fxr-2.1-0:2.1.20-1.el8_0.x86_64 View
77Red HatAppStream-8.0.0.Z.E4S:dotnet-host-fxr-2.1-debuginfo-0:2.1.20-1.el8_0.x86_64 View
78Red HatAppStream-8.0.0.Z.E4S:dotnet-runtime-2.1-0:2.1.20-1.el8_0.x86_64 View
79Red HatAppStream-8.0.0.Z.E4S:dotnet-runtime-2.1-debuginfo-0:2.1.20-1.el8_0.x86_64 View
80Red HatAppStream-8.0.0.Z.E4S:dotnet-sdk-2.1-0:2.1.516-1.el8_0.x86_64 View
81Red HatAppStream-8.0.0.Z.E4S:dotnet-sdk-2.1.5xx-0:2.1.516-1.el8_0.x86_64 View
82Red HatAppStream-8.0.0.Z.E4S:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.516-1.el8_0.x86_64 View
83Red HatAppStream-8.1.0.Z.EUS:dotnet-0:2.1.516-1.el8_1.src View
84Red HatAppStream-8.1.0.Z.EUS:dotnet-debuginfo-0:2.1.516-1.el8_1.x86_64 View
85Red HatAppStream-8.1.0.Z.EUS:dotnet-debugsource-0:2.1.516-1.el8_1.x86_64 View
86Red HatAppStream-8.1.0.Z.EUS:dotnet-host-fxr-2.1-0:2.1.20-1.el8_1.x86_64 View
87Red HatAppStream-8.1.0.Z.EUS:dotnet-host-fxr-2.1-debuginfo-0:2.1.20-1.el8_1.x86_64 View
88Red HatAppStream-8.1.0.Z.EUS:dotnet-runtime-2.1-0:2.1.20-1.el8_1.x86_64 View
89Red HatAppStream-8.1.0.Z.EUS:dotnet-runtime-2.1-debuginfo-0:2.1.20-1.el8_1.x86_64 View
90Red HatAppStream-8.1.0.Z.EUS:dotnet-sdk-2.1-0:2.1.516-1.el8_1.x86_64 View
91Red HatAppStream-8.1.0.Z.EUS:dotnet-sdk-2.1.5xx-0:2.1.516-1.el8_1.x86_64 View
92Red HatAppStream-8.1.0.Z.EUS:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.516-1.el8_1.x86_64 View
93Red HatAppStream-8.2.0.Z.MAIN.EUS:aspnetcore-runtime-3.1-0:3.1.6-1.el8_2.x86_64 View
94Red HatAppStream-8.2.0.Z.MAIN.EUS:aspnetcore-targeting-pack-3.1-0:3.1.6-1.el8_2.x86_64 View
95Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-0:2.1.516-1.el8_2.src View
96Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-0:3.1.106-1.el8_2.x86_64 View
97Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-0:3.1.6-1.el8_2.x86_64 View
98Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-apphost-pack-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 View
99Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-debuginfo-0:2.1.516-1.el8_2.x86_64 View
100Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-debugsource-0:2.1.516-1.el8_2.x86_64 View
101Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-0:3.1.6-1.el8_2.x86_64 View
102Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-debuginfo-0:3.1.6-1.el8_2.x86_64 View
103Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-fxr-2.1-0:2.1.20-1.el8_2.x86_64 View
104Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-host-fxr-2.1-debuginfo-0:2.1.20-1.el8_2.x86_64 View
105Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-0:3.1.6-1.el8_2.x86_64 View
106Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-hostfxr-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 View
107Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-2.1-0:2.1.20-1.el8_2.x86_64 View
108Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-2.1-debuginfo-0:2.1.20-1.el8_2.x86_64 View
109Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-3.1-0:3.1.6-1.el8_2.x86_64 View
110Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-runtime-3.1-debuginfo-0:3.1.6-1.el8_2.x86_64 View
111Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-2.1-0:2.1.516-1.el8_2.x86_64 View
112Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-2.1.5xx-0:2.1.516-1.el8_2.x86_64 View
113Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-2.1.5xx-debuginfo-0:2.1.516-1.el8_2.x86_64 View
114Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-3.1-0:3.1.106-1.el8_2.x86_64 View
115Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-sdk-3.1-debuginfo-0:3.1.106-1.el8_2.x86_64 View
116Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-targeting-pack-3.1-0:3.1.6-1.el8_2.x86_64 View
117Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet-templates-3.1-0:3.1.106-1.el8_2.x86_64 View
118Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet3.1-0:3.1.106-1.el8_2.src View
119Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet3.1-debuginfo-0:3.1.106-1.el8_2.x86_64 View
120Red HatAppStream-8.2.0.Z.MAIN.EUS:dotnet3.1-debugsource-0:3.1.106-1.el8_2.x86_64 View
121Red HatAppStream-8.2.0.Z.MAIN.EUS:netstandard-targeting-pack-2.1-0:3.1.106-1.el8_2.x86_64 View
122microsoft.NET Framework, SharePoint, Visual Studio View
Total affected vendors: 2|Products: 122

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Fix released

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat fixes

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.8cvss_v3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HRed Hat

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

12 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

CVE-2020-1147 : the database holds 2 public PoC/exploit sources for it. For direct links to the sources, open the Public Exploits tab.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-1147 is associated with the following CWEs:

CWE-502: Deserialization of Untrusted Data

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-1147 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekiyor

Official Sources and Advisories

Canonical URLvendor-advisoryRHBZ#1856929vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2020-1147vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2020-1147vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patch

CVSS Vector Radar Chart

8.8 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.RequiredConfidentialityLowIntegrityHighAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User Interaction—
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)High
Availability (Erişilebilirlik)High

Yama doğrulandı

12 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

RH
Red Hat logo
Red Hat
M
microsoft logo
microsoft

Weakness Type (CWE & CAPEC)

CWE-502

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-1147"