Cross site scripting

2021-06-0915:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

47.1%

JSON

A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionToken parameter of multiple methods in Simple HTTP API. This is resolved in 5.9.1 and 5.10.

CPENameOperatorVersion
cloverdxeq5.8.1
cloverdxeq5.8.0
cloverdxle5.7.0
cloverdxge5.9.0
cloverdxlt5.9.1

Name	Operator	Version
cloverdx	eq	5.8.1
cloverdx	eq	5.8.0
cloverdx	le	5.7.0
cloverdx	ge	5.9.0
cloverdx	lt	5.9.1

References

support.cloverdx.com/releases/

support1.cloverdx.com/hc/en-us/articles/360021006520

0.001 Low

EPSS

Percentile

47.1%

JSON

Related for PRION:CVE-2021-30133