Lucene search
GoogleOSV:GHSA-RWH9-8XX8-4WFMHistorySep 30, 2021 - 8:50 p.m.
Cross-site Scripting in OpenCRX
2021-09-3020:50:21
Google
osv.dev
10
opencrx
versions v4.0.0 - v5.1.0
cross-site scripting
xss
unsanitized parameters
password reset
external javascript files
software
EPSS
0.001
Percentile
40.9%
In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.
Related
cve
cve
CVE-2021-25959
2021-09-29 14:15:07
nvd
nvd
CVE-2021-25959
2021-09-29 14:15:07
prion
prion
Cross site scripting
2021-09-29 14:15:00
github
github
Cross-site Scripting in OpenCRX
2021-09-30 20:50:21
cvelist
cvelist