PT-2020-13639 · Digdash Enterprise · Digdash

Florian Nivette · Published 2020-06-15 · Updated 2020-06-19 · CVE-2020-13652

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions DigDash versions 2018R2 before p20200528 DigDash versions 2019R1 before p20200528 DigDash versions 2019R2 before p20200430 DigDash versions 2020R1 before p20200507

Description A cross-site scripting (XSS) issue exists in the login menu.

Recommendations For DigDash version 2018R2 before p20200528, update to a version after p20200528. For DigDash version 2019R1 before p20200528, update to a version after p20200528. For DigDash version 2019R2 before p20200430, update to a version after p20200430. For DigDash version 2020R1 before p20200507, update to a version after p20200507.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-13652

Affected Products

Digdash

References · 4

• https://osv.dev/vulnerability/CVE-2020-13652 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13652 · Security Note
• https://know.bishopfox.com/advisories/digdash-version-2018 · Note
• https://t.me/cvenotify/4387 · Telegram Post