PT-2021-23116
CVE-2021-41132
·
تاريخ النشر
2021-10-14
·
تاريخ التحديث
2021-10-20
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OMERO.web versions prior to 5.11.0
OMERO.figure versions prior to 4.4.1
Description
The issue arises from a lack of proper sanitization through HTML escaping in various templates, combined with the use of
jQuery.html(). This leads to potential cross-site scripting possibilities when specially crafted input is provided to different fields.Recommendations
For OMERO.web versions prior to 5.11.0, upgrade to version 5.11.0 or higher.
For OMERO.figure versions prior to 4.4.1, upgrade to version 4.4.1 or higher.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾