CVE-2020-36365

Medium

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and…

mitre·CWE-601·Published 2021-05-19

CVSS

6.1

EPSS

0.03

KEV

Exploits

cve.orgen

166 chars

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect.

NVDen

166 chars

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect.

Smartstore (también se conoce como SmartStoreNET) versiones anteriores a 4.1.0, permite una redirección abierta en las funciones CommonController.ClearCache, ClearDatabaseCache, RestartApplication y ScheduleTaskController.Edit

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
3.1	Primary	NVD	6.1	2.8	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N