Cross-site Scripting (XSS)

🗓️ 27 Mar 2021 22:52:42Reported by Veracode Vulnerability DatabaseType

vulnerability to XSS attacks, injection of malicious scripts, access to cookies and browser data, access to resources

Reporter	Title	Published	Views	Family All 25
ATTACKERKB	CVE-2021-21332	26 Mar 202120:15	–	attackerkb
CNNVD	Apache Synapse 跨站脚本漏洞	26 Mar 202100:00	–	cnnvd
CNVD	Matrix Synapse Cross-Site Scripting Vulnerability (CNVD-2021-24348)	30 Mar 202100:00	–	cnvd
CVE	CVE-2021-21332	26 Mar 202119:55	–	cve
Cvelist	CVE-2021-21332 Cross-site scripting (XSS) vulnerability in the password reset endpoint	26 Mar 202119:55	–	cvelist
Debian CVE	CVE-2021-21332	26 Mar 202119:55	–	debiancve
EUVD	EUVD-2021-0125	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 34 Update: matrix-synapse-1.38.1-1.fc34	2 Aug 202101:05	–	fedora
Github Security Blog	Cross-site scripting (XSS) vulnerability in the password reset endpoint	26 Mar 202119:52	–	github
NVD	CVE-2021-21332	26 Mar 202120:15	–	nvd

Vulners

Node

AND

AND

matrix_synapse matrix_synapseRange1.20.0rc1–1.27.0rc1python

Source	Link
github	www.github.com/matrix-org/synapse/pull/9200
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-21332
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-246w-56m2-5899
github	www.github.com/matrix-org/synapse/commit/e54746bdf7d5c831eabe4dcea76a7626f1de73df
github	www.github.com/matrix-org/synapse/pull/9200
github	www.github.com/matrix-org/synapse/releases/tag/v1.27.0
github	www.github.com/matrix-org/synapse/security/advisories/GHSA-246w-56m2-5899

07 Nov 2023 22:56Current

2.1Low risk

Vulners AI Score2.1

CVSS 3.16.9 - 8.2

CVSS 24.3

EPSS0.00505