GitHub_MCVELIST:CVE-2021-32616CVE-2021-32616 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in 1CDN
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.3%
1CDN is open-source file sharing software. In 1CDN before commit f88a2730fa50fc2c2aeab09011f6f142fd90ec25, there is a basic cross-site scripting vulnerability that allows an attacker to inject /<script>//code</script> and execute JavaScript code on the client side.
CNA Affected
[
{
"product": "cdn",
"vendor": "onedotprojects",
"versions": [
{
"status": "affected",
"version": "< f88a2730fa50fc2c2aeab09011f6f142fd90ec25"
}
]
}
]Related
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.3%