CVE-2020-13650 is a Server-Side Request Forgery (SSRF) vulnerability affecting DigDash versions 2018R2 (prior to p20200210) and 2019R1 (prior to p20200210). This flaw allows an unauthenticated attacker to use the application as a proxy, potentially disclosing application credentials to external servers or probing internal services. Rated 7.5 HIGH on the CVSS scale, the vulnerability has a network attack vector and low attack complexity, leading to high confidentiality impact. There is no evidence of active exploitation, nor are there public exploit modules available, though it has received some community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2018r2CPE matchmatch criteria | cpe:2.3:a:digdash:digdash:2018r2:-:*:*:*:*:*:* | ||
2019r1CPE matchmatch criteria | cpe:2.3:a:digdash:digdash:2019r1:-:*:*:*:*:*:* | ||
2019r2CPE matchmatch criteria | cpe:2.3:a:digdash:digdash:2019r2:-:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.