4 matches found
CVE-2021-41172
ASRedis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is...
Input validation
ASRedis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is...
CVE-2021-41172 Self-XSS in AS_Redis
ASRedis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is...
CVE-2021-41172
CVE-2021-41172 concerns AS_Redis, an AntSword Redis plugin. The Redis Manage plugin before v0.5 is vulnerable to Self-XSS caused by insufficient input validation/sanitization in the Redis server configuration, enabling code execution through plugin configuration. Mitigation: upgrade to version 0....