PT-2021-13758
CVE-2021-20080
·
تاريخ النشر
2021-04-09
·
تاريخ التحديث
2021-04-19
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
ManageEngine ServiceDesk Plus versions prior to 11200
ManageEngine AssetExplorer versions prior to 6800
Description:
The issue is related to insufficient output sanitization, which allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks. This can be achieved by uploading a crafted XML asset file.
Recommendations:
For ManageEngine ServiceDesk Plus versions prior to 11200, update to version 11200 or later.
For ManageEngine AssetExplorer versions prior to 6800, update to version 6800 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾