PT-2021-16892
CVE-2021-25968
·
تاريخ النشر
2021-10-19
·
تاريخ التحديث
2021-10-21
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OpenCMS versions 10.5.0 through 11.0.2
Description
The issue allows low privileged application users to store malicious scripts in the Sitemap functionality. These scripts are executed in a victim’s browser when they open the page containing the vulnerable field.
Recommendations
For OpenCMS versions 10.5.0 through 11.0.2, consider disabling the Sitemap functionality until a patch is available to prevent the storage and execution of malicious scripts. Restrict access to the Sitemap feature to minimize the risk of exploitation. Avoid using the vulnerable field in the Sitemap functionality until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾