CVE-2020-9299

{"containers": {"cna": {"affected": [{"product": "Netflix Dispatch", "vendor": "n/a", "versions": [{"status": "affected", "version": "All versions prior to v20201106"}]}], "descriptions": [{"lang": "en", "value": "There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter. This vulnerability can be exploited by an authenticated user."}], "problemTypes": [{"descriptions": [{"description": "Multiple Cross-Site Scripting Vulnerabilities", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-11-09T14:50:18.000Z", "orgId": "ea63fd80-a441-4c7b-ba78-e48a8071cae2", "shortName": "netflix"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/Netflix/dispatch/releases/tag/v20201106"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-004.md"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security-report@netflix.com", "ID": "CVE-2020-9299", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Netflix Dispatch", "version": {"version_data": [{"version_value": "All versions prior to v20201106"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter. This vulnerability can be exploited by an authenticated user."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Multiple Cross-Site Scripting Vulnerabilities"}]}]}, "references": {"reference_data": [{"name": "https://github.com/Netflix/dispatch/releases/tag/v20201106", "refsource": "MISC", "url": "https://github.com/Netflix/dispatch/releases/tag/v20201106"}, {"name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-004.md", "refsource": "MISC", "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-004.md"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T10:26:15.857Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/Netflix/dispatch/releases/tag/v20201106"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-004.md"}]}]}, "cveMetadata": {"assignerOrgId": "ea63fd80-a441-4c7b-ba78-e48a8071cae2", "assignerShortName": "netflix", "cveId": "CVE-2020-9299", "datePublished": "2020-11-09T14:50:18.000Z", "dateReserved": "2020-02-19T00:00:00.000Z", "dateUpdated": "2024-08-04T10:26:15.857Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Netflix Dispatch", "vendor": "n/a", "versions": [{"status": "affected", "version": "All versions prior to v20201106"}]}], "source": "security-report@netflix.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netflix:dispatch:*:*:*:*:*:*:*:*", "matchCriteriaId": "AAD94C3D-CBB6-4542-8254-7D860E39AFD4", "versionEndExcluding": "20201106", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter. This vulnerability can be exploited by an authenticated user."}, {"lang": "es", "value": "Se detectaron y reportaron vulnerabilidades de tipo XSS en la aplicaci\u00f3n Dispatch, que afectaron los par\u00e1metros name y description de Incident Priority, Incident Type, Tag Type, e Incident Filter. Esta vulnerabilidad puede ser explotada por un usuario autenticado"}], "id": "CVE-2020-9299", "lastModified": "2026-06-17T03:27:43.590", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-11-09T15:15:13.680", "references": [{"source": "security-report@netflix.com", "tags": ["Third Party Advisory"], "url": "https://github.com/Netflix/dispatch/releases/tag/v20201106"}, {"source": "security-report@netflix.com", "tags": ["Third Party Advisory"], "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-004.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/Netflix/dispatch/releases/tag/v20201106"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-004.md"}], "sourceIdentifier": "security-report@netflix.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}