PT-2021-24130

CVE-2021-44543

·

Published

2021-12-13

·

Updated

2025-10-02

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Privoxy (affected versions not specified)
Description: A cross-site scripting (XSS) issue was discovered in Privoxy. The problem was addressed by encoding the template name in the cgi error no template() function when Privoxy is set to serve the user manual itself.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2021-44543
BDU:2025-12569
BDU:2025-12570
BDU:2025-12571
BDU:2025-12572
ALT-PU-2021-3560
ALT-PU-2022-2439
ALT-PU-2024-13795
DLA-2844-1
MGASA-2021-0570
OPENSUSE-SU-2021:1646-1
OPENSUSE-SU-2021_1646-1
OPENSUSE-SU-2022:10186-1
OPENSUSE-SU-2024:11677-1
USN-5826-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com