CVE-2021-42117lowCWE-20

CVE-2021-42117: falha de baixa gravidade em Business-DNA Solutions GmbH TopEase

UI Redressing in TopEase

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TopEase

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.5epss 0.7%
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Business-DNA Solutions GmbH · TopEase
CVEs relacionadas — Business-DNA Solutions GmbH TopEase

No mesmo produto, das mais perigosas para as menos.

CVE-2021-42544HIGHLack of Rate limiting in Authentication in TopEaseEPSS 1.4%CVE-2021-42115HIGHMissing HTTPOnly flag on sensitive cookie in TopEaseEPSS 1.3%CVE-2021-42545HIGHInsufficient Session Expiration in TopEaseEPSS 1.1%CVE-2021-42120MEDIUMMissing Character Length (Denial of Service) in TopEaseEPSS 1.1%CVE-2021-42123HIGHMissing Upload Filter in TopEaseEPSS 1.1%CVE-2021-42121MEDIUMDenial of Service via Invalid Date Format in TopEaseEPSS 1.0%