Read the docs
TI-2020-10710 Aliases CVE-2020-13650GHSA-8h7p-mm6j-mm98

An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210.

Priority LOW 35CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery (SSRF) that allows use of the application as a proxy. Sent to an external server, a forged request discloses application credentials. For a request to an internal component, the request is blind, but through the error message it's possible to determine whether the request targeted a open service.

Why it matters now

EPSS 0.01027 63rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:digdash:digdash:2018r2:-:*:*:*:*:*:*2018r2VulnerableDigdash
cpe:2.3:a:digdash:digdash:2019r1:-:*:*:*:*:*:*2019r1VulnerableDigdash
cpe:2.3:a:digdash:digdash:2019r2:-:*:*:*:*:*:*2019r2VulnerableDigdash
  • cpe:2.3:a:digdash:digdash:2018r2:-:*:*:*:*:*:* Versions 2018r2 Vulnerable ·Digdash
  • cpe:2.3:a:digdash:digdash:2019r1:-:*:*:*:*:*:* Versions 2019r1 Vulnerable ·Digdash
  • cpe:2.3:a:digdash:digdash:2019r2:-:*:*:*:*:*:* Versions 2019r2 Vulnerable ·Digdash

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-13650
  2. 2026-10-03 Alias added: GHSA-8h7p-mm6j-mm98

References

Advisory 1

  • TI-2020-10711 An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and… CVSS 3.1HIGH 7.8
  • TI-2020-10712 An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528… CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences