CVE-2021-32852

🗓️ 20 Feb 2023 22:11:15Reported by GitHub_MType

Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2021-32852 countly-server vulnerable to Cross-site Scripting	20 Feb 202300:00	–	vulnrichment
Prion	Cross site scripting	20 Feb 202322:15	–	prion
Cvelist	CVE-2021-32852 countly-server vulnerable to Cross-site Scripting	20 Feb 202300:00	–	cvelist
NVD	CVE-2021-32852	20 Feb 202322:15	–	nvd
OSV	CVE-2021-32852	20 Feb 202322:15	–	osv

Nvd

Vulners

Node

count countly_serverRange<21.11community

[
  {
    "vendor": "Countly",
    "product": "countly-server",
    "versions": [
      {
        "version": "21.11",
        "status": "affected",
        "lessThan": "21.11",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/Countly/countly-server/blob/6b90bb775e747cabe46fe197c6a6989acc6c3417/frontend/express/views/reset.html
securitylab	www.securitylab.github.com/advisories/GHSL-2021-104-countly-server/
github	www.github.com/Countly/countly-server/blob/6b90bb775e747cabe46fe197c6a6989acc6c3417/frontend/express/app.js
github	www.github.com/Countly/countly-server/releases/tag/v21.11

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Feb 2023 22:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS35.4 - 9

EPSS0.00258

SSVC

CWE-79