CVE-2021-23445 Cross-site Scripting (XSS)

🗓️ 27 Sep 2021 16:35:18Reported by snykType

Security vulnerability in datatables.net

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	23 Nov 202115:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 Jan 202414:39	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now fixed in 5.2.3.3 or higher (CVE-2021-23445)	6 Nov 202513:50	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities	25 Jun 202617:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Node.js, and Data Tables from Spry Media may affect IBM Spectrum Protect Plus	31 Jan 202218:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jquery-Ui, highcharts, and datatables are affecting QRadar User Behavior Analytics (CVE-2021-41182, CVE-2021-41183, CVE-2021-41184, CVE-2021-23445, CVE-2021-29489)	5 Aug 202222:43	–	ibm
ATTACKERKB	CVE-2021-23445	27 Sep 202116:31	–	attackerkb
BDU FSTEC	The vulnerability of the DataTables table processing plugin, related to the lack of protection for website structure, allows attackers to compromise data integrity.	5 Apr 202200:00	–	bdu_fstec

[
  {
    "vendor": "n/a",
    "product": "datatables.net",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.11.3",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/08/msg00018.html
cdn	www.cdn.datatables.net/1.11.3/
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1715371
security	www.security.netapp.com/advisory/ntap-20240621-0006/
github	www.github.com/DataTables/Dist-DataTables/commit/59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b
snyk	www.snyk.io/vuln/SNYK-JS-DATATABLESNET-1540544
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1715376

21 Jun 2024 19:07Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.13.1

EPSS0.01837