Lucene search

GoogleOSV:CVE-2021-4267

HistoryDec 21, 2022 - 7:15 p.m.

CVE-2021-4267

2022-12-2119:15:13

Google

osv.dev

tad_discuss

remote attackers

cross-site scripting

discusstitle

cve-2021-4267

vdb-216469

patch

af94d034ff8db642d05fd8788179eab05f433958

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

JSON

A vulnerability classified as problematic was found in tad_discuss. Affected by this vulnerability is an unknown functionality. The manipulation of the argument DiscussTitle leads to cross site scripting. The attack can be launched remotely. The name of the patch is af94d034ff8db642d05fd8788179eab05f433958. It is recommended to apply a patch to fix this issue. The identifier VDB-216469 was assigned to this vulnerability.

References

github.com/tad0616/tad_discuss/commit/af94d034ff8db642d05fd8788179eab05f433958

github.com/tad0616/tad_discuss/pull/19

vuldb.com/?id.216469

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

JSON

Related for OSV:CVE-2021-4267