Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2021-38157
HistoryAug 06, 2021 - 8:58 p.m.

CVE-2021-38157

2021-08-0620:58:13
mitre
github.com
3
leostream connection broker
unauthenticated
reflected xss
index.pl
user parameter
unsupported products

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.2%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

43.2%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2021-38157