CVE-2020-36660

A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. Upgrading to version 0.12.12 is able to address this issue. The patch is named 9e03f68e46e85ca9c9694a6971859b3ee66f0240. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220211.

• CWE-200

• https://github.com/paxswill/evesrp/commit/9e03f68e46e85ca9c9694a6971859b3ee66f0240Patch
• https://github.com/paxswill/evesrp/releases/tag/v0.12.12Release Notes
• https://vuldb.com/?ctiid.220211Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220211Third Party Advisory
• https://github.com/paxswill/evesrp/commit/9e03f68e46e85ca9c9694a6971859b3ee66f0240Patch
• https://github.com/paxswill/evesrp/releases/tag/v0.12.12Release Notes
• https://vuldb.com/?ctiid.220211Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220211Third Party Advisory

Published

Feb 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36655Yii Yii2 Gii before 2.2.2 allows remote attackers to execute…8.8
• CVE-2020-36656The Spectra WordPress plugin before 1.15.0 does not sanitize…5.4
• CVE-2020-36657uptimed before 0.4.6-r1 on Gentoo allows local users (with a…7.8
• CVE-2020-36658In Apache::Session::LDAP before 0.5, validity of the X.509 c…8.1
• CVE-2020-36659In Apache::Session::Browseable before 1.3.6, validity of the…8.1
• CVE-2020-3666u'Out of bounds memory access during memory copy while proce…7.8
• CVE-2020-36661A vulnerability was found in Kong lua-multipart 0.5.8-1. It …7.5
• CVE-2020-36662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-36663A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2020-36664A vulnerability has been found in Artesãos SEOTools up to 0.…6.1
• CVE-2020-36665A vulnerability was found in Artesãos SEOTools up to 0.17.1 …6.1
• CVE-2020-36666The directory-pro WordPress plugin before 1.9.5, final-user-…8.8