CVE-2021-42770

2021-11-0816:15:07

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester.

CPENameOperatorVersion
coreeq15.1.8
coreeq17.7.a
coreeq18.1.b
coreeq21.7.1
coreeq15.1.11.4
coreeq15.1.11.1
coreeq16.7.a
coreeq15.1.6.1
coreeq21.7.3
coreeq15.1.9

Name	Operator	Version
core	eq	15.1.8
core	eq	17.7.a
core	eq	18.1.b
core	eq	21.7.1
core	eq	15.1.11.4
core	eq	15.1.11.1
core	eq	16.7.a
core	eq	15.1.6.1
core	eq	21.7.3
core	eq	15.1.9

Rows per page:

1-10 of 681

References

cert.orange.com

github.com/orangecertcc/security-research/security/advisories/GHSA-r32j-xgg3-w2rw

opnsense.org/opnsense-21-7-4-released/