CVE-2020-36850: Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure
Published Jul 25, 2025
·Updated
An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user.
Affected Software
1 affected component
Sitecore JSS React Sample Application>=11.0.0<=14.0.1
Event History
Jul 25, 2025
CVE Published
via MITRE·03:54 PM
Data Sourced
via MITRE·03:54 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-36850?
The severity of CVE-2020-36850 is considered critical due to potential unauthorized information disclosure between users.
2
How do I fix CVE-2020-36850?
To fix CVE-2020-36850, upgrade the Sitecore JSS React Sample Application to a secure version above 14.0.1.
3
What versions are affected by CVE-2020-36850?
CVE-2020-36850 affects Sitecore JSS React Sample Application versions from 11.0.0 to 14.0.1.
4
Can CVE-2020-36850 lead to data breaches?
Yes, CVE-2020-36850 can potentially lead to data breaches by exposing sensitive page content to unauthorized users.
5
What type of vulnerability is CVE-2020-36850?
CVE-2020-36850 is categorized as an information disclosure vulnerability.