CVE-2021-32812

Monkshu is an enterprise application server for mobile apps iOS and Android, responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a...

CVE-2021-32812

CVE-2021-32812 affects Monkshu (enterprise app server) up to version 2.90. It is a reflected cross-site scripting flaw in the frontend HTTP server where a crafted URL that triggers a 500 error can cause the server to echo the provided URL in the response. Impact is described as moderate; exploita...