CVE-2021-34370

Accela Civic Platform (versions up to 21.1; and affected earlier up to 20.1 in CVE-2021-34370) contains a Cross-Site Scripting vulnerability via ssoAdapter/logoutAction.do?successURL. The issue allows injection of arbitrary JavaScript in the victim’s browser, with potential data theft, session hi...

CVE-2021-34370

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

PT-2021-20482 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions prior to 20.2 Description: The issue allows for successURL XSS in the ssoAdapter/logoutAction.do endpoint. The vendor has stated that there are configurable security flags and they are unable to reproduce the...

Accela Civic Platform 跨站脚本漏洞

Accela Civic Platform is a cloud-based solution for Accela's applications to modernize city systems for land management and code enforcement, increased citizen engagement and mobile information access. The vulnerability stems from the lack of proper validation of client-side data by the WEB...

PT-2021-20480 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions through 20.1 Description: The issue allows remote attackers to obtain sensitive information via a modified contactSeqNumber value in the portlets/contact/ref/refContactDetail.do endpoint. However, the vendor...

Accela Civic Platform Cross-Site Scripting Vulnerability

Accela Civic Platform is Accela's application software cloud-based solution to modernize city systems for land management and code enforcement, increased civic engagement and mobile information access. Accela Civic Platform cross-site scripting vulnerability that stems from Accela Platform's lack...

Accela Civic Platform 安全漏洞

Accela Civic Platform is a cloud-based solution for Accela's application software to modernize city systems for land management and code enforcement, increased citizen engagement and mobile information access. information disclosure vulnerabilities exist in versions of Accela Civic Platform prior...

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

Information disclosure

DISPUTED In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information."...

CVE-2021-33904

Accela Civic Platform

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

Accela Civic Platform 跨站脚本漏洞

Accela Civic Platform is Accela's application software cloud-based solution to modernize city systems for land management and code enforcement, increased civic engagement and mobile information access. Accela Civic Platform cross-site scripting vulnerability that stems from Accela Platform's lack...

PT-2021-20359 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions prior to 21.2 Description: The issue concerns a security problem where the servProvCode parameter in the "security/hostSignon.do" endpoint is vulnerable to XSS. The vendor has noted that there are configurable...

Addressing cybersecurity risk in industrial IoT and OT

As the industrial Internet of Things IIoT and operational technology OT continue to evolve and grow, so too, do the responsibilities of the Chief Information Security Officer CISO. The CISO now needs to mitigate risks from cloud-connected machinery, warehouse systems, and smart devices scattered...

Research on Human Honesty

New research from Science: "Civic honesty around the globe": Abstract: Civic honesty is essential to social capital and economic development, but is often in conflict with material self-interest. We examine the trade-off between honesty and self-interest using field experiments in 355 cities...

Senate's Use of Signal A Good First Step, Experts Say

On Tuesday the United States Senate made it official and approved the use of encrypted messaging app Signal by staffers. Encryption advocates applauded the measure, but say more needs to be done to protect “civic” infrastructure critical to democracy. “The move to secure communications...

Accela Civic Platform Citizen Access portal cross-site scripting vulnerability

Accela Civic Platform Citizen Access portal is a web portal for citizens and government to connect and interact. Cross-site scripting vulnerabilities exist in the Accela Civic Platform Citizen Access portal. These vulnerabilities can be exploited by an attacker to steal cookie-based authenticatio...

Accela Civic Platform Citizen Access portal Arbitrary File Upload Vulnerability

The Accela Civic Platform Citizen Access portal is a web portal from Accela, Inc. that connects citizens to government. An arbitrary file upload vulnerability exists in the Accela Civic Platform Citizen Access portal, which can be exploited by an attacker to upload arbitrary files to a web server...

CVE-2016-5661

Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified EventArgument and filename parameters...