CVE-2021-3694 Cross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmb

2021-08-2312:41:58

CWE-79

@huntrdev

www.cve.org

cross-site scripting

reflected

ledgersmb

remote code execution

information disclosure

authenticated user

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

AI Score

9.5

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.

CNA Affected

[
  {
    "product": "ledgersmb/ledgersmb",
    "vendor": "ledgersmb",
    "versions": [
      {
        "status": "unaffected",
        "version": "1.7.33"
      },
      {
        "lessThan": "1.8.18",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]