Lucene search

K
cvelistMitreCVELIST:CVE-2021-29267
HistoryMar 29, 2021 - 3:05 p.m.

CVE-2021-29267

2021-03-2915:05:05
mitre
www.cve.org
3
sherlockim
xss
chatbot
help-desk staff

EPSS

0.001

Percentile

40.7%

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature.

EPSS

0.001

Percentile

40.7%

Related for CVELIST:CVE-2021-29267