DigDash DigDash 2019R1
Approved changes feed: RSS · Atom
cpe:2.3:a:digdash:digdash:2019r1:-:*:*:*:*:*:*part: a version: 2019r1 update: -
| Vendor | Digdash (c14d640d-6164-5fbf-9df7-ec7e026861fc) |
|---|---|
| Product | Digdash (38cf3084-0724-5219-b0b2-9abc9f89a67c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-13651 |
vulnerable | 2026-06-08 05:18:00.969677 |
Details available
An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provide data that will be used to generate the JNLP file used by a client to obtain the right Java application. By providing an attacker-controlled URL, the client will obtain a rogue JNLP file specifying the installation of malicious JAR archives and executed with full privileges on the client computer.
Published: 2020-06-15T18:07:55.000Z
Updated: 2024-08-04T12:25:16.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13650 |
vulnerable | 2026-06-08 05:18:00.968719 |
Details available
An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery (SSRF) that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to an internal component, the request is blind, but through the error message it's possible to determine whether the request targeted a open service.
Published: 2020-06-15T18:08:00.000Z
Updated: 2024-08-04T12:25:16.474Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.