Lucene search
NCSC.chCVELIST:CVE-2021-42552HistoryMar 16, 2022 - 12:55 p.m.
CVE-2021-42552 Reflected XSS in Archivista
2022-03-1612:55:09
CWE-79
NCSC.ch
www.cve.org
1
cross-site scripting
archivistabox
javascript
vulnerability
webclient
security
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.0%
Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim’s browser. This issue affects all ArchivistaBox versions prior to 2022/I.
CNA Affected
[
{
"product": "ArchivistaBox webclient",
"vendor": "Archivista GmbH",
"versions": [
{
"lessThan": "2022/I",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-42552
2022-03-16 13:15:08
cve
cve
CVE-2021-42552
2022-03-16 13:15:08
prion
prion
Cross site scripting
2022-03-16 13:15:00
cnvd
cnvd
ArchivistaBox webclient cross-site scripting vulnerability
2022-03-18 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.0%
Related for CVELIST:CVE-2021-42552