CVE-2021-23260 - CERT CVE

  1. CVE-2021-23260

ID CVE-2021-23260
Sažetak Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.
Reference
CVSS
Base: 3.5
Impact: 2.9
Exploitability:6.8
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL NONE
CVSS vektor AV:N/AC:M/Au:S/C:N/I:P/A:N
Zadnje važnije ažuriranje 03-12-2021 - 14:01
Objavljeno 02-12-2021 - 16:15