← All advisories

Critical severity9.8NVD Advisory· Published Dec 30, 2020· Updated Jun 17, 2026

CVE-2020-11103

CVE-2020-11103

Description

JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Webswing/Webswing4 versions
cpe:2.3:a:webswing:webswing:*:*:*:*:-:*:*:*+ 3 more
- cpe:2.3:a:webswing:webswing:*:*:*:*:-:*:*:*range: >=2.7,<20.1
- cpe:2.3:a:webswing:webswing:*:*:*:*:lts:*:*:*range: <2.6.12
- (no CPE)
- (no CPE)range: <2.6.12 LTS, <2.7.x, <20.1

Patches

Vulnerability mechanics

References

2

bitbucket.org/meszarv/webswing/issues/375/webswing-jslink-mechanism-remote-codenvdIssue TrackingThird Party Advisory
www.webswing.org/docs/2.6/discover/release_notes.htmlnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.