CVE-2020-13651

CVE-2020-13651 concerns DigDash versions (2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430). A user-supplied data input is used to generate the JNLP file that a client uses to obtain the Java application. By supplying an attacker-controlled URL, the client can retriev...