Lucene search
K

4 matches found

NVD
NVD
added 2021/10/26 2:15 p.m.10 views

CVE-2021-41172

ASRedis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is...

6.4CVSS0.0033EPSS
Exploits1References3
Prion
Prion
added 2021/10/26 2:15 p.m.12 views

Input validation

ASRedis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is...

3.5CVSS5.8AI score0.0033EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/10/26 2:0 p.m.10 views

CVE-2021-41172 Self-XSS in AS_Redis

ASRedis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is...

6.4CVSS6.8AI score0.0033EPSS
Exploits1References3
CVE
CVE
added 2021/10/26 2:0 p.m.43 views

CVE-2021-41172

CVE-2021-41172 concerns AS_Redis, an AntSword Redis plugin. The Redis Manage plugin before v0.5 is vulnerable to Self-XSS caused by insufficient input validation/sanitization in the Redis server configuration, enabling code execution through plugin configuration. Mitigation: upgrade to version 0....

6.4CVSS5.8AI score0.0033EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder