PT-2020-13638

Name of the Vulnerable Software and Affected Versions DigDash versions 2018R2 before p20200528 DigDash versions 2019R1 before p20200421 DigDash versions 2019R2 before p20200430 Description An issue allows a user to provide data that will be used to generate the JNLP file used by a client to obtai...

CVE-2020-13650: Server-Side Request Forgery (SSRF)

An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery SSRF that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to ...

PT-2020-13637

Name of the Vulnerable Software and Affected Versions DigDash versions 2018R2 before p20200210 DigDash versions 2019R1 before p20200210 Description An issue was discovered in the login page, which is vulnerable to Server-Side Request Forgery SSRF. This allows the application to be used as a proxy...