CVE-2021-41169mediumCWE-79

CVE-2021-41169: falha de média gravidade em sulu

Improper Neutralization HTML tags in sulu/sulu

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar sulu+ Monitorar sulu/sulu

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.2epss 0.6%
Sulu is an open-source PHP content management system based on the Symfony framework. In versions before 1.6.43 are subject to stored cross site scripting attacks. HTML input into Tag names is not properly sanitized. Only admin users are allowed to create tags. Users are advised to upgrade.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
Produtos afetados
sulu · sulu
CVEs relacionadas — sulu

No mesmo produto, das mais perigosas para as menos.

CVE-2021-43836HIGHPHP file inclusion in the Sulu admin panelEPSS 2.0%CVE-2021-43835HIGHPrivilege escalation in the Sulu Admin panelEPSS 1.2%CVE-2020-15132MEDIUMReset Password / Login vulnerability in SuluEPSS 1.1%CVE-2021-32737HIGHXSS Injection in Media Collection Title was possibleEPSS 0.7%CVE-2023-39343MEDIUMSulu Observable Response Discrepancy on Admin LoginEPSS 0.6%CVE-2026-82394MEDIUMSulu: Fix authorization bypass when creating preview linksEPSS 0.6%