Reflected Cross-site Scripting in ACS Commons

🗓️ 02 Feb 2021 15:46:52Reported by GitHub Advisory DatabaseType

ACS Commons version 4.9.2 suffers from Reflected Cross-site Scripting vulnerability due to invalid JCR characters. Resolved in v4.10.

Reporter	Title	Published	Views	Family All 32
Tenable Nessus	Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)	11 Feb 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)	11 Feb 202100:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)	11 Feb 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)	11 Feb 202100:00	–	nessus
Circl	CVE-2021-21028	11 Feb 202122:47	–	circl
CNNVD	Acrobat Reader DC 资源管理错误漏洞	9 Feb 202100:00	–	cnnvd
CNVD	Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2021-11025)	10 Feb 202100:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Use After Free (APSB21-09: CVE-2021-21028)	9 Feb 202100:00	–	checkpoint_advisories
CVE	CVE-2021-21028	11 Feb 202119:42	–	cve
Cvelist	CVE-2021-21028 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution	11 Feb 202119:42	–	cvelist

Vulners

Node

Source	Link
github	www.github.com/Adobe-Consulting-Services/acs-aem-commons/security/advisories/GHSA-f92j-qf46-p6vm
github	www.github.com/Adobe-Consulting-Services/acs-aem-commons/commit/14d769c86606c4ce9a93c47a19f87e1ad72788d6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21028
helpx	www.helpx.adobe.com/security/products/acrobat/apsb21-09.html
github	www.github.com/advisories/GHSA-f92j-qf46-p6vm

01 Feb 2023 05:05Current

1.2Low risk

Vulners AI Score1.2

CVSS 26.8

CVSS 3.18.8

CVSS 38.8

EPSS0.22983