Information disclosure in Sitecore Jss React Sample Application

CVE-2020-36850

An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user.

Vulnerability class: Information Disclosure

EPSS: 0.004 (36.5th percentile) — read the EPSS interpretation.

Affected products

Sitecore Jss React Sample Application — versions 11.0.0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

disclosure@vulncheck.com (vendor-advisory, patch)
disclosure@vulncheck.com (vendor-advisory, patch)
disclosure@vulncheck.com (third-party-advisory)