CVE-2020-36365

MediumPublished

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open...

Published: May 19, 2021
Updated: Aug 4, 2024
Assigning CNA: mitre

Primary CVSS

6.1/ 10Medium

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS probability estimate

3.1%

Low · next 30 days

Percentile: 87.7%
Model date: Nov 2, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Template

Smartstore <4.1.0 - Open RedirectTemplate
http/cves/2020/CVE-2020-36365.yaml
Nuclei Templates
DetectionEvidence observed: Sep 26, 2026Revision: 6f886171c0a2Related tool
Declared conditions
- network: http($.protocol_keys)
- verification: regex($.matchers[*].type)

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.