PT-2021-21636
CVE-2021-37402
·
تاريخ النشر
2021-07-22
·
تاريخ التحديث
2022-02-10
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OX App Suite versions prior to 7.10.3-rev32
OX App Suite version 7.10.4 prior to 7.10.4-rev18
Description
The issue allows for XSS via binary data that is mishandled when the legacy data retrieval endpoint has been enabled.
Recommendations
For OX App Suite versions prior to 7.10.3-rev32, update to version 7.10.3-rev32 or later.
For OX App Suite version 7.10.4 prior to 7.10.4-rev18, update to version 7.10.4-rev18 or later.
As a temporary workaround, consider disabling the legacy data retrieval endpoint until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾