CVE-2021-4256

CVE-2021-4256 affects the ctrlo lenio project, originating from an issue in the file views/index.tt. Attacker-controlled parameters task.name and task.site.org.name can be manipulated to trigger cross-site scripting. The vulnerability is exploitable remotely. A patch is identified by the hash e16...

CVE-2021-4257

The CVE-2021-4257 entry concerns ctrlo lenio. The vulnerability is in the Task Handler’s views/task.tt, where manipulating the argument path site.org.name/check.name/task.tasktype.name/task.name enables cross-site scripting. A remote attacker could exploit this, with impact limited to client-side...

ctrlo lenio 安全漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from an unknown function in its Ticket Handler component lib/Lenio.pm library that operates on the parameter siteid leads allowing an attacker to implement cross-site scripti...

CVE-2021-4253

The CVE-2021-4253 entry concerns the ctrlo lenio project, specifically the Ticket Handler component’s library lib/Lenio.pm. The vulnerability arises from an issue in the function handling the site_id parameter, leading to cross-site scripting that can be triggered remotely. Affected versions and ...