Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-41169
HistoryOct 21, 2021 - 9:15 p.m.

CVE-2021-41169

2021-10-2121:15:08
CWE-79
[email protected]
web.nvd.nist.gov
1
sulu
cms
symfony
stored xss
tag names
admin users
upgrade

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.4%

JSON

Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attacks. HTML input into Tag names is not properly sanitized. Only admin users are allowed to create tags. Users are advised to upgrade.

Affected configurations

Nvd
Node
sulusuluRange<1.6.43
VendorProductVersionCPE
sulusulu*cpe:2.3:a:sulu:sulu:*:*:*:*:*:*:*:*

Related

osv 2
github 1
prion 1
cvelist 1
veracode 1
cnvd 1
cve 1
osv
osv
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu
2021-10-22 16:20:53
CVE-2021-41169
2021-10-21 21:15:08
github
github
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu
2021-10-22 16:20:53
prion
prion
Cross site scripting
2021-10-21 21:15:00
cvelist
cvelist
CVE-2021-41169 Improper Neutralization HTML tags in sulu/sulu
2021-10-21 20:25:10
veracode
veracode
Cross-site Scripting (XSS)
2021-10-22 05:28:55
cnvd
cnvd
SULU Sulu Cross-Site Scripting Vulnerability
2021-10-25 00:00:00
cve
cve
CVE-2021-41169
2021-10-21 21:15:08

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.4%

JSON
Related for NVD:CVE-2021-41169
osv2github1prion1cvelist1veracode1cnvd1cve1