VulnerabilityModified
CVE-2021-3834
An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).
MEDIUM 6.1EPSS 0.59%
Does this matter?
Lower severity and a low EPSS score (0.59%). Track it; it rarely justifies an emergency change on its own.
Description
Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.59% probability · 46th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- artica/integria ims
- Source
- cve-coordination@incibe.es
References
- https://integriaims.com/en/services/updates/Release Notes, Vendor Advisory
- https://www.incibe.es/en/incibe-cert/notices/aviso/integria-ims-vulnerable-cross-site-scripting-xss
- https://integriaims.com/en/services/updates/Release Notes, Vendor Advisory
- https://www.incibe.es/en/incibe-cert/notices/aviso/integria-ims-vulnerable-cross-site-scripting-xss
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.