Lucene search
GoogleOSV:GHSA-X823-J7C4-VPC5HistoryApr 20, 2021 - 4:31 p.m.
Cross-site scripting in sickrage
2021-04-2016:31:43
Google
osv.dev
8
sickrage
cross-site-scripting
xss
quicksearch
vulnerability
user input
sessionid
masquerade
EPSS
0.001
Percentile
32.7%
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the quicksearch feature. Therefore, an attacker can steal a user’s sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
Related
osv
osv
PYSEC-2021-148
2021-04-12 14:15:00
CVE-2021-25926
2021-04-12 14:15:16
nvd
nvd
CVE-2021-25926
2021-04-12 14:15:16
cve
cve
CVE-2021-25926
2021-04-12 14:15:16
cvelist
cvelist
CVE-2021-25926
2021-04-12 13:45:57
prion
prion
Cross site scripting
2021-04-12 14:15:00
github
github
Cross-site scripting in sickrage
2021-04-20 16:31:43
veracode
veracode
Cross-Site Scripting (XSS)
2021-04-13 00:26:28