CVE-2020-36621CWE-707

chedabob whatismyudid mobileconfig.js exports.enrollment cross site scripting

Low · published December 21, 2022

CVSS v3.1
3.5
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function exports.enrollment of the file routes/mobileconfig.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is bb33d4325fba80e7ea68b79121dba025caf6f45f. It is recommended to apply a patch to fix this issue. VDB-216470 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Weakness
CWE-707 · Improper Neutralization
Published
2022-12-21T00:00Z
EPSS history
Timeline
  • 21 DEC 00:00Z
    chedabob whatismyudid mobileconfig.js exports.enrollment cross site scripting
    cvelistv5