CVE Daily

CVE-2020-36850

An information disclosure vulnerability exits in Sitecore JSS React Sample Appli...

High CVSS 8.7

Overview

An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user.

CWE: CWE-200 Published: 2025-07-25T16:15:27.050
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.7 (HIGH)
  • Detected tags: info_leak (tag impact: LOW)

Recommended actions:

  • Reduce verbose errors, remove debug endpoints, minimize PII in logs.

Recommended tools

Tags