CVE-2020-9300

6.5 mediumEPSS 0.9%

Medium (6.5) in netflix dispatch. EPSS 0.9% chance of exploitation in the next 30 days.

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure deployment guidelines the risk of this is lowered, as this may only be exploited by an authenticated user.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
Published: 2020-11-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netflix:dispatch

References

https://github.com/Netflix/dispatch/releases/tag/v20201106
https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-005.md
https://github.com/Netflix/dispatch/releases/tag/v20201106
https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-005.md

Check your stack JSON