and execute JavaScript code on t","datePublished":"2021-05-28T20:20:17+00:00","dateModified":"2024-08-03T23:25:30.989000+00:00","inLanguage":"en","author":{"@type":"Organization","name":"Vexday"},"publisher":{"@type":"Organization","name":"Vexday","url":"https://vexday.io"},"mainEntityOfPage":"https://vexday.io/en/cve/CVE-2021-32616","keywords":"CVE-2021-32616, CWE-79","breadcrumb":{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://vexday.io/en"},{"@type":"ListItem","position":2,"name":"CVE-2021-32616"}]}}← back

CVE-2021-32616highCWE-79

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in 1CDN

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.7%

exploitation probability

0.7%top 48% of all CVEs

observed exploitation

nono source reports it

1CDN is open-source file sharing software. In 1CDN before commit f88a2730fa50fc2c2aeab09011f6f142fd90ec25, there is a basic cross-site scripting vulnerability that allows an attacker to inject /<script>//code</script> and execute JavaScript code on the client side.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

onedotprojects · cdn

References

https://github.com/onedotprojects/cdn/commit/f88a2730fa50fc2c2aeab09011f6f142fd90ec25https://github.com/onedotprojects/cdn/security/advisories/GHSA-g5c4-48rw-hjgh