CVE-2021-26722

2021-02-0518:15:12

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the “No results found for” message in the search bar.

CPENameOperatorVersion
oncalleq.1.1.2
oncalleq1.3.8
oncalleq1.4.0
oncalleq1.2.0
oncalleq1.3.9
oncalleq1.1.6
oncalleq1.3.5
oncalleq1.3.4
oncalleq.1.1.5
oncalleq1.1.9

Name	Operator	Version
oncall	eq	.1.1.2
oncall	eq	1.3.8
oncall	eq	1.4.0
oncall	eq	1.2.0
oncall	eq	1.3.9
oncall	eq	1.1.6
oncall	eq	1.3.5
oncall	eq	1.3.4
oncall	eq	.1.1.5
oncall	eq	1.1.9

Rows per page:

1-10 of 221

References

github.com/linkedin/oncall/issues/341