Cross-site scripting in SiCKRAGE
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-25925US | medium5.4 | — | ||
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefo… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/SiCKRAGE/SiCKRAGEPACKAGE
- https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/sickrage/PYSEC-2021-147.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-25925ADVISORY
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan