Back to Database
Status published
High
CVE-2020-36850
Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure
Vulnerability Description
An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-36850
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Sitecore
References
More from Sitecore
View All →CVE-2025-53694
Information Disclosure in ItemServices API
High
7.5
CVE-2025-53693
HTML Cache Poisoning through Unsafe Reflections
Critical
9.8
CVE-2025-53692
Sitecore Experience Platform Cross-Site Scripting Vulnerability
High
7.1
CVE-2025-53691
Sitecore Experience Remote Code Execution through Insecure Deserialization
High
8.8
CVE-2025-53690
Sitecore Products ViewState Deserialization Vulnerability
Critical
9
Affected Vendor
Sitecore
View all reports →Affected Software
JSS React Sample Application
Vulnerable Versions:
11.0.0
Timeline
Official Publish:
July 25th, 2025
Last Modified:
March 5th, 2026
Added to House:
July 21st, 2026