CVE-2021-40637 in openSIS Classic

Riassunto

di MITRE • 03/03/2022

OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker can inject JavaScript code to get the user's cookie and take over the working session of user.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 07/09/2021
• Divulgazione: 03/03/2022
• Moderazione: accettato
• Voce: VDB-194157
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00774
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-40637
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-40637
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-40637/