Lucene search

MitreCVE-2021-33570

HistoryMay 25, 2021 - 10:15 p.m.

CVE-2021-33570

2021-05-2522:15:10

CWE-79

mitre

web.nvd.nist.gov

110

cve-2021-33570

postbird

stored xss

img

onerror

postgresql

database

nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.005

Percentile

76.6%

JSON

Postbird 0.8.4 allows stored XSS via the onerror attribute of an IMG element in any PostgreSQL database table. This can result in reading local files via vectors involving XMLHttpRequest and open of a file:/// URL, or discovering PostgreSQL passwords via vectors involving Window.localStorage and savedConnections.

Affected configurations

Nvd

Node

postbird_projectpostbirdMatch0.8.4

VendorProductVersionCPE
postbird_projectpostbird0.8.4cpe:2.3:a:postbird_project:postbird:0.8.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
postbird_project	postbird	0.8.4	cpe:2.3:a:postbird_project:postbird:0.8.4:::::::*

References

packetstormsecurity.com/files/162831/Postbird-0.8.4-Cross-Site-Scripting-Local-File-Inclusion.html

packetstormsecurity.com/files/162872/Postbird-0.8.4-XSS-LFI-Insecure-Data-Storage.html

github.com/Paxa/postbird/issues/132

github.com/Paxa/postbird/issues/133

github.com/Paxa/postbird/issues/134

github.com/Tridentsec-io/postbird

tridentsec.io/blogs/postbird-cve-2021-33570/

www.exploit-db.com/exploits/49910

Social References

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.005

Percentile

76.6%

JSON

Related for CVE-2021-33570