Cross-site scripting in SiCKRAGE
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-25925US | medium5.4 | — | ||
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefo… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/SiCKRAGE/SiCKRAGEPACKAGE
- https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/sickrage/PYSEC-2021-147.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-25925ADVISORY
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan