CVE-2020-18766

2020-10-2616:15:13

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

CPENameOperatorVersion
antswordeq1.1.1
antswordeq2.0.4
antswordeq2.0.3
antswordeq1.3.0
antswordeq1.1.2
antswordeq2.0.1
antswordeq2.0.7
antswordeq2.0.0
antswordeq1.1.0
antswordeq2.0.2

Name	Operator	Version
antsword	eq	1.1.1
antsword	eq	2.0.4
antsword	eq	2.0.3
antsword	eq	1.3.0
antsword	eq	1.1.2
antsword	eq	2.0.1
antsword	eq	2.0.7
antsword	eq	2.0.0
antsword	eq	1.1.0
antsword	eq	2.0.2