PT-2021-20140
CVE-2021-3346
·
Published
2021-01-29
·
Updated
2021-02-02
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Foris versions prior to 101.1.1
Description
The issue is related to a lack of certain HTML escaping in the login template. This could potentially lead to security issues, but specific details about exploitation or affected devices are not provided.
Recommendations
For versions prior to 101.1.1, update to version 101.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the login template until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾