CVE-2020-29041

A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its…

published January 6, 2021

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its comprehension (code review). Specifically, JavaScript source maps were inadvertently included in the production Webpack configuration. These maps contain sources used to generate the bundle, configuration settings (e.g., API keys), and developers' comments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01372 · 71.7th percentile
Published
2021-01-06T20:52Z
EPSS history
Timeline
  • 06 JAN 20:52Z
    A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its…
    cvelistv5