Lucene search

K
osvGoogleOSV:CVE-2021-44217
HistoryJan 18, 2022 - 3:15 p.m.

CVE-2021-44217

2022-01-1815:15:08
Google
osv.dev
6

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%