CVE-2020-36621
Low
Description
A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function exports.enrollment of the file routes/mobileconfig.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is bb33d4325fba80e7ea68b79121dba025caf6f45f. It is recommended to apply a patch to fix this issue. VDB-216470 is the identifier assigned to this vulnerability.
SeverityLow
CVSS3.5
Exploit probability—
ProductWhatismyudid
PublishedDec 21, 2022
First seenDec 21, 2022
Weakness typeCWE-707CWE-707
How to fix
Update
- whatismyudid_project whatismyudid2020-09-30 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whatismyudid_project whatismyudid | v < 2020-09-30 | 2020-09-30 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.