What’s Vulnerable › Vulnerabilities

CVE-2020-36621: chedabob whatismyudid mobileconfig.js exports.enrollment cross site scripting

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-21 · updated 2026-06-17
• Weakness: CWE-707

Description

A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function exports.enrollment of the file routes/mobileconfig.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is bb33d4325fba80e7ea68b79121dba025caf6f45f. It is recommended to apply a patch to fix this issue. VDB-216470 is the identifier assigned to this vulnerability.

Affected products

• chedabob whatismyudid: before 2020-09-30 — fixed in 2020-09-30

How to fix

Upgrade to a fixed version: chedabob whatismyudid 2020-09-30. Check the vendor advisory for mitigations.

References

• https://github.com/chedabob/whatismyudid/commit/bb33d4325fba80e7ea68b79121dba025caf6f45f
• https://vuldb.com/?id.216470
• https://github.com/chedabob/whatismyudid/commit/bb33d4325fba80e7ea68b79121dba025caf6f45f
• https://vuldb.com/?id.216470

Get alerted when CVE-2020-36621 or the next vulnerability affects your stack