CVE-2021-3395

CVE-2021-3395 推奨説明 Pryaniki 6.44.3 におけるクロスサイトスクリプティング XSS の脆弱性により、リモートの認証済みユーザーが任意のファイルをアップロードできます。誰かが添付ファイルを開くと、JavaScript コードが実行されます。 脆弱性タイプ クロスサイトスクリプティング XSS 製品のベンダー OOO Tekhnologii zashchity 影響を受ける製品コードベース PRYANIKY - 6.44.3 攻撃タイプ リモート 攻撃ベクトル この脆弱性を悪用するには、細工された HTML ファイルを開く必要があります。...

EUVD-2021-26724

Malware in sbrugna...

Pryaniki Cross-Site Scripting Vulnerability

Pryaniki is a website building system for building a corporate communication platform from the Russian company Pryaniky. The platform is used for organizing communication within the company, motivational planning, idea management projects and other business processes. Pryaniki 6.44.3 suffers from...

CVE-2021-3395

A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment...

CVE-2021-3395

A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment...

CVE-2021-3395

A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment...

CVE-2021-3395

A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment...

CVE-2021-3395

CVE-2021-3395 affects Pryaniki 6.44.3. The vulnerability is a stored cross-site scripting (XSS) flaw where remote authenticated users can upload arbitrary files, with JavaScript executed when someone views the attachment. Public exploit details are not provided in the connected documents. Other s...

PT-2021-20366

Name of the Vulnerable Software and Affected Versions: Pryaniki version 6.44.3 Description: A cross-site scripting XSS issue allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment. Recommendations: For Pryaniki version...

Pryaniki 跨站脚本漏洞

Pryaniki is a website building system for building a corporate communication platform from the Russian company Pryaniky. The platform is used for organizing communication within the company, motivational planning, idea management projects and other business processes. Pryaniki 6.44.3 suffers from...

CVE-2021-3395: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment...