VulnerabilityModified
CVE-2021-27564
A stored XSS issue exists in Appspace 6.2.4.
MEDIUM 5.4EPSS 0.52%
Does this matter?
Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.
Description
A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes.
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.52% probability · 43th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- appspace/appspace
- Source
- cve@mitre.org
References
- https://github.com/viperbluff/Appspace-Ver-6.2.4-Stored-XssExploit, Third Party Advisory
- https://github.com/viperbluff/Appspace-Ver-6.2.4-Stored-XssExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.