CVEvulnerability
CVE-2020-36525
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-06-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected configurations
• servicerocket linking 5.5.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://seclists.org/fulldisclosure/2020/Oct/15 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?id.164511 Third Party Advisory
- https://seclists.org/fulldisclosure/2020/Oct/15 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?id.164511 Third Party Advisory