CVE-2021-37458 in Axon PBX

Resumen

por MITRE • 2021-07-26

Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2021-07-25
• Divulgación: 2021-07-26
• Moderación: aceptado
• Artículo: VDB-179644
• CPE: listo
• CWE: CWE-79 (confirmado)
• Explotación: Descargar
• CVSS: 3.5 (VulDB)
• EPSS: 0.00622
• KEV: no
• Actividades: muy bajo
• Sector: Government, Finance, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-37458
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-37458
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-37458/