CVE-2021-27564

Name of the Vulnerable Software and Affected Versions Appspace version 6.2.4

Description A stored XSS issue exists, allowing an authenticated user to enter an XSS payload under the groups section of the network tab, which is then stored as the group name. This payload executes whenever another member visits that group.

Recommendations For Appspace version 6.2.4, as a temporary workaround, consider restricting access to the groups section of the network tab until a patch is available. Avoid using the groups feature in the network tab to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.