CVE-2020-36365
CVE-2020-36365
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 2.6%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
19 May 2021Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect.
Affected products
n/a · n/a