exploitDog

CVE-2021-3694

Опубликовано: 23 авг. 2021

Источник: nvd

CVSS3: 8.2

CVSS3: 9.6

CVSS2: 6.8

EPSS Низкий

Описание

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.

Ссылки

https://github.com/ledgersmb/ledgersmb/commit/98fa476d46a4a7e5e9492ed69b4fa190be5547fc
Patch
Third Party Advisory
https://huntr.dev/bounties/ef7f4cf7-3a81-4516-b261-f5b6ac21430c
Third Party Advisory
https://ledgersmb.org/cve-2021-3694-cross-site-scripting
Vendor Advisory
https://www.debian.org/security/2021/dsa-4962
Third Party Advisory
https://github.com/ledgersmb/ledgersmb/commit/98fa476d46a4a7e5e9492ed69b4fa190be5547fc
Patch
Third Party Advisory
https://huntr.dev/bounties/ef7f4cf7-3a81-4516-b261-f5b6ac21430c
Third Party Advisory
https://ledgersmb.org/cve-2021-3694-cross-site-scripting
Vendor Advisory
https://www.debian.org/security/2021/dsa-4962
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.1.0 (включая) до 1.1.12 (включая)

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.2.0 (включая) до 1.2.26 (включая)

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.3.0 (включая) до 1.3.47 (включая)

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.4.0 (включая) до 1.4.42 (включая)

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.5.0 (включая) до 1.5.30 (включая)

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.6.0 (включая) до 1.6.33 (включая)

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.7.0 (включая) до 1.7.32 (включая)

cpe:2.3:a:ledgersmb:ledgersmb:*:*:*:*:*:*:*:*

Версия от 1.8.0 (включая) до 1.8.17 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00252

Низкий

8.2 High

CVSS3

9.6 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-79

CWE-79

Связанные уязвимости

CVE-2021-3694

CVSS3: 8.2

ubuntu

больше 4 лет назад

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.

CVE-2021-3694

CVSS3: 8.2

debian

больше 4 лет назад

LedgerSMB does not sufficiently HTML-encode error messages sent to the ...

GHSA-5wc4-gq9m-293h

github

больше 3 лет назад

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.

EPSS

Процентиль: 48%

0.00252

Низкий

8.2 High

CVSS3

9.6 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-79

CWE-79