CVE-2021-42558

2022-01-1219:06:45

mitre

www.cve.org

caldera security issue

xss vulnerabilities

authenticated attackers

unauthenticated attackers

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

39.6%

JSON

An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may be exploited by authenticated and unauthenticated attackers.

References

github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42558-Multiple%20XSS-MITRE%20Caldera

github.com/mitre/caldera/releases