Lucene search
+L

6 matches found

NVD
NVD
•added 2022/03/10 5:44 p.m.•25 views

CVE-2021-42856

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting XSS attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability...

6.1CVSS0.00604EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/10 5:44 p.m.•15 views

CVE-2021-42856

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting XSS attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability...

6.1CVSS5.8AI score0.00604EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/03/09 4:51 p.m.•33 views

CVE-2021-42856 Reflected Cross-site Scripting at DsaDataTest

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting XSS attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability...

4.7CVSS6AI score0.00604EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•2 views

PT-2022-11712

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned Description A Cross-site scripting XSS issue was found in the /DsaDataTest endpoint, where the Metric parameter lacks input checks, allowing an attacker to craft a malicious payload and trigger an XSS...

6.1CVSS0.00604EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/09 12:00 a.m.•7 views

CVE-2021-42856: Improper Input Validation

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting XSS attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability...

6.1CVSS6.2AI score0.00604EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/02/23 10:30 a.m.•9 views

CVE-2021-42856

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting XSS attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability...

6.1CVSS6.4AI score0.00604EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder