Medium severity5.3NVD Advisory· Published Jan 6, 2021· Updated Jun 17, 2026
CVE-2020-29041
CVE-2020-29041
Description
A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its comprehension (code review). Specifically, JavaScript source maps were inadvertently included in the production Webpack configuration. These maps contain sources used to generate the bundle, configuration settings (e.g., API keys), and developers' comments.
Affected products
4- Web-Sesame/Web-Sesamedescription
- Range: = 2020.1.1.3375
- Range: = 2020.1.1.3375
- cpe:2.3:a:sesame-system:web-sesame:2020.1.1.3375:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- blog.bssi.fr/source-code-vulnerability-disclosure-discovered-in-the-web-sesame-application-of-til-technologies/nvdExploitThird Party Advisory
- blog.bssi.fr/vulnerabilite-de-divulgation-de-code-source-identifiee-au-sein-de-lapplication-web-sesame-de-til-technologies/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.