Логотип exploitDog
bind:CVE-2021-25959
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-25959

Количество 2

Количество 2

nvd логотип

CVE-2021-25959

больше 4 лет назад

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-rwh9-8xx8-4wfm

больше 4 лет назад

Cross-site Scripting in OpenCRX

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-25959

In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.

CVSS3: 6.1
0%
Низкий
больше 4 лет назад
github логотип
GHSA-rwh9-8xx8-4wfm

Cross-site Scripting in OpenCRX

CVSS3: 6.1
0%
Низкий
больше 4 лет назад

Уязвимостей на страницу