Lucene search
GoogleOSV:GHSA-G67G-HVC3-XMVFHistoryOct 14, 2021 - 9:19 p.m.
Inconsistent input sanitisation leads to XSS vectors
2021-10-1421:19:23
Google
osv.dev
9
input sanitisation
xss vectors
omero.web
omero.figure
security patch
EPSS
0.001
Percentile
34.8%
Background
A variety of templates do not perform proper sanitization through HTML escaping.
Due to the lack of sanitization and use of jQuery.html(), there are a whole host of XSS possibilities with specially crafted input to a variety of fields.
Impact
OMERO.web before 5.11.0 and OMERO.figure before 4.4.1.
Patches
Users should upgrade OMERO.web to 5.11.0 or higher and OMERO.figure to 4.4.1 or higher.
Related
cvelist
cvelist
CVE-2021-41132 Inconsistent input sanitisation leads to XSS vectors
2021-10-14 15:45:12
osv
osv
prion
prion
Cross site scripting
2021-10-14 16:15:00
cve
cve
CVE-2021-41132
2021-10-14 16:15:09
nvd
nvd
CVE-2021-41132
2021-10-14 16:15:09
github
github
Inconsistent input sanitisation leads to XSS vectors
2021-10-14 21:19:23