CVE-2021-27770 in Sametime Proxy

Tóm tắt

Bởi MITRE • 13/05/2022

The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• chịu trách nhiệm: HCL Software
• Đặt trước: 26/02/2021
• Tiết lộ: 13/05/2022
• Kiểm duyệt: được chấp nhận
• mục: VDB-199736
• CPE: sẵn sàng
• CWE: CWE-284 (Đã xác nhận)
• CVSS: 6.8 (CNA)
• EPSS: 0.00352
• KEV: không
• Các hoạt động: rất thấp
• ngành: Homeoffice, Agriculture, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-27770
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-27770
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-27770/