GoogleOSV:CVE-2021-21029CVE-2021-21029
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.011 Low
EPSS
Percentile
84.5%
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a Reflected Cross-site Scripting vulnerability via ‘file’ parameter. Successful exploitation could lead to arbitrary JavaScript execution in the victim’s browser. Access to the admin console is required for successful exploitation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| devdocs | eq | 0.42.0-beta1 | |
| devdocs | eq | 2.1.18 | |
| devdocs | eq | 2.2.0-RC1.1 | |
| devdocs | eq | 2.3.3 | |
| devdocs | eq | 0.1.0-alpha107 | |
| devdocs | eq | 0.42.0-beta2 | |
| devdocs | eq | 2.3.4 | |
| devdocs | eq | 2.2.2 | |
| devdocs | eq | 2.2.0-RC1.2 | |
| devdocs | eq | 2.1.8 |
Related
4.8 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
6.3 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.011 Low
EPSS
Percentile
84.5%