What is CVE-2020-29041?

CVE-2020-29041 is a medium-severity vulnerability in Sesame-System Web-Sesame. CVSS score: 5.3/10. Published 2021-01-06.

How severe is CVE-2020-29041?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Sesame-System Web-Sesame

CVE-2020-29041

A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its comprehension (code review). Specifically, JavaScript source maps were inadvertently included in the production Webpack configuration. These maps contain sources used to generate the bundle, configuration settings (e.g., API keys), and developers' comments.

EPSS: 0.014 (68.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Sesame-system Web-sesame — versions 2020.1.1.3375
N/a — versions n/a

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-29041?: CVE-2020-29041 is a medium-severity vulnerability in Sesame-System Web-Sesame. CVSS score: 5.3/10. Published 2021-01-06.
How severe is CVE-2020-29041?: Medium severity. CVSS v3 base score is 5.3 out of 10.