critical9.8
CVE-2020-11103
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.
Impact
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webswing | Webswing | before 2.6.12 from 2.7 before 20.1 |
References
- NVD record
- CVE.org record
- https://bitbucket.org/meszarv/webswing/issues/375/webswing-jslink-mechanism-remote-code
- https://www.webswing.org/docs/2.6/discover/release_notes.html#release-notes-2-6-12
- https://bitbucket.org/meszarv/webswing/issues/375/webswing-jslink-mechanism-remote-code
- https://www.webswing.org/docs/2.6/discover/release_notes.html#release-notes-2-6-12