PT-2021-20140

CVE-2021-3346

·

Published

2021-01-29

·

Updated

2021-02-02

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Foris versions prior to 101.1.1
Description The issue is related to a lack of certain HTML escaping in the login template. This could potentially lead to security issues, but specific details about exploitation or affected devices are not provided.
Recommendations For versions prior to 101.1.1, update to version 101.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the login template until the update is applied.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾