Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
35e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216271. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mgallegos/laravel-jqgrid/pull/72 - https://github.com/mgallegos/laravel-jqgrid/commit/fbc2d94f43d0dc772767a5bdb2681133036f935e - https://vuldb.com/?id.216271
CVE ID: CVE-2021-4263 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:30:21.115Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: leanote Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is 0f9733c890077942150696dcc6d2b1482b7a0a19. It is recommended to apply a patch to fix this issue. The identifier VDB-216461 was assigned to this vulnerability. Add
It is recommended to apply a patch to fix this issue. The identifier VDB-216461 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216461 - https://vuldb.com/?ctiid.216461 - https://github.com/leanote/leanote/commit/0f9733c890077942150696dcc6d2b1482b7a0a19
CVE ID: CVE-2021-4264 State: PUBLISHED Published: 2022-12-21T00:00:00 Last Updated: 2024-08-03T17:23:10.011Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: LinkedIn Products: dustjs Problem Types: CWE-1321 Description: A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.0 is able to address this issue. The name of the patch is ddb6523
o the public and may be used. Upgrading to version 3.0.0 is able to address this issue. The name of the patch is ddb6523832465d38c9d80189e9de60519ac307c3. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216464. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216464 - https://vuldb.com/?ctiid.216464 - https://github.com/linkedin/dustjs/issues/804 - https://github.com/linkedin/dustjs/pull/805 - https://github.com/linkedin/dustjs/commit/ddb6523832465d38c9d80189e9de60519ac307c3 - https://github.com/linkedin/dustjs/releases/tag/v3.0.0
CVE ID: CVE-2021-4265 State: PUBLISHED Published: 2022-12-21T00:00:00 Last Updated: 2024-11-19T20:31:25.227Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: siwapp-ror Problem Types: CWE-707 Description: A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216467. Additional Analyst Notes: - CVE Program Container: - C
e. The associated identifier of this vulnerability is VDB-216467. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/siwapp/siwapp-ror/pull/365 - https://github.com/siwapp/siwapp-ror/commit/924d16008cfcc09356c87db01848e45290cb58ca - https://vuldb.com/?id.216467
CVE ID: CVE-2021-4266 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:30:12.851Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Webdetails Products: cpf Problem Types: CWE-707 Description: A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 9.5.0.0-81 is able to address this issue. The name of the patch is 3bff900d228e8cae3af256b447c5d15
Upgrading to version 9.5.0.0-81 is able to address this issue. The name of the patch is 3bff900d228e8cae3af256b447c5d15bdb03c174. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216468. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/siwapp/siwapp-ror/pull/365 - https://github.com/webdetails/cpf/releases/tag/9.5.0.0-81 - https://github.com/webdetails/cpf/commit/3bff900d228e8cae3af256b447c5d15bdb03c174 - https://vuldb.com/?id.216468
CVE ID: CVE-2021-4267 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:29:58.939Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: tad_discuss Problem Types: CWE-707 Description: A vulnerability classified as problematic was found in tad_discuss. Affected by this vulnerability is an unknown functionality. The manipulation of the argument DiscussTitle leads to cross site scripting. The attack can be launched remotely. The name of the patch is af94d034ff8db642d05fd8788179eab05f433958. It is recommended to apply a patch to fix this issue. The identifier VDB-216469 was assigned to this vulnerability. Additional A
commended to apply a patch to fix this issue. The identifier VDB-216469 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tad0616/tad_discuss/pull/19 - https://github.com/tad0616/tad_discuss/commit/af94d034ff8db642d05fd8788179eab05f433958 - https://vuldb.com/?id.216469
CVE ID: CVE-2021-4268 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:29:52.707Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: phpRedisAdmin Problem Types: CWE-863 Description: A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is able to address this issue. The name of the patch is b9039adbb264c81333328faa9575ecf8e0d2be94. It is recommended to upgrade the affected component. The associated identifier
9039adbb264c81333328faa9575ecf8e0d2be94. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216471. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/erikdubbelboer/phpRedisAdmin/commit/b9039adbb264c81333328faa9575ecf8e0d2be94 - https://github.com/erikdubbelboer/phpRedisAdmin/releases/tag/v1.18.0 - https://vuldb.com/?id.216471
CVE ID: CVE-2021-4269 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:29:39.357Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: SimpleRisk Problem Types: CWE-707 Description: A vulnerability has been found in SimpleRisk and classified as problematic. This vulnerability affects the function checkAndSetValidation of the file simplerisk/js/common.js. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 20220306-001 is able to address this issue. The name of the patch is 591405b4ed160fbefc1dca1e55c5745079a7bb48. It is recommended to up
s able to address this issue. The name of the patch is 591405b4ed160fbefc1dca1e55c5745079a7bb48. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216472. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/simplerisk/code/commit/591405b4ed160fbefc1dca1e55c5745079a7bb48 - https://github.com/simplerisk/code/releases/tag/20220306-001 - https://vuldb.com/?id.216472
CVE ID: CVE-2021-4270 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:29:26.353Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Imprint CMS Problem Types: CWE-707 Description: A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 6140b140ccd02b5e4e7d6ba013ac1225724487f4. It is recommended to apply a patch to fix this issue. VDB-216474 is the identifier assigned
b5e4e7d6ba013ac1225724487f4. It is recommended to apply a patch to fix this issue. VDB-216474 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peders/Imprint-CMS/commit/6140b140ccd02b5e4e7d6ba013ac1225724487f4 - https://vuldb.com/?id.216474
CVE ID: CVE-2021-4271 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:29:14.184Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: panicsteve Products: w2wiki Problem Types: CWE-707 Description: A vulnerability was found in panicsteve w2wiki. It has been rated as problematic. Affected by this issue is the function toHTML of the file index.php of the component Markdown Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is 8f1d0470b4ddb1c7699e3308e765c11ed29542b6. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216476.
c11ed29542b6. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216476. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/panicsteve/w2wiki/commit/8f1d0470b4ddb1c7699e3308e765c11ed29542b6 - https://vuldb.com/?id.216476
CVE ID: CVE-2021-4272 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:29:02.619Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: studygolang Problem Types: CWE-707 Description: A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the argument contentHtml leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is 0fb30f9640bd5fa0cae58922eac6c00bb1a94391. It is recommended to apply a patch to fix this issue. The identifier VDB-216477 was assigned to this vulnerabil
1a94391. It is recommended to apply a patch to fix this issue. The identifier VDB-216477 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/studygolang/studygolang/commit/0fb30f9640bd5fa0cae58922eac6c00bb1a94391 - https://vuldb.com/?id.216477
CVE ID: CVE-2021-4273 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:28:48.709Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: studygolang Problem Types: CWE-707 Description: A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 97ba556d42fa89dfaa7737e9cd3a8ddaf670bb23. It is recommended to apply a patch to fix this
used. The name of the patch is 97ba556d42fa89dfaa7737e9cd3a8ddaf670bb23. It is recommended to apply a patch to fix this issue. VDB-216478 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/studygolang/studygolang/pull/158 - https://github.com/studygolang/studygolang/commit/97ba556d42fa89dfaa7737e9cd3a8ddaf670bb23 - https://vuldb.com/?id.216478
CVE ID: CVE-2021-4274 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:28:35.899Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: sileht Products: bird-lg Problem Types: CWE-707 Description: A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout.html. The manipulation of the argument request_args leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ef6b32c527478fefe7a4436e10b96ee28ed5b308. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerabil
436e10b96ee28ed5b308. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216479. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sileht/bird-lg/pull/82 - https://github.com/sileht/bird-lg/commit/ef6b32c527478fefe7a4436e10b96ee28ed5b308 - https://vuldb.com/?id.216479
CVE ID: CVE-2021-4275 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-14T17:28:23.169Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: katlings Products: pyambic-pentameter Problem Types: CWE-863 Description: A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is 974f21aa1b2527ef39c8afe1a5060548217deca8. It is recommended to apply a patch to fix this issue. VDB-216498 is the identifier assigned to this vulnerability. Additional Analyst
ded to apply a patch to fix this issue. VDB-216498 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/katlings/pyambic-pentameter/commit/974f21aa1b2527ef39c8afe1a5060548217deca8 - https://vuldb.com/?id.216498
CVE ID: CVE-2021-4276 State: PUBLISHED Published: 2022-12-25T00:00:00.000Z Last Updated: 2025-04-14T17:27:23.109Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: dns-stats Products: hedgehog Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in dns-stats hedgehog. It has been rated as problematic. Affected by this issue is the function DSCIOManager::dsc_import_input_from_source of the file src/DSCIOManager.cpp. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the mome
has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 58922c345d3d1fe89bb2020111873a3e07ca93ac. It is recommended to apply a patch to fix this issue. VDB-216746 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: We do assume that the Data Manager server can only be accessed by authorised users. Because of this, we don’t believe this specific attack is possible without such a compromise of the Data Manager server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
ise of the Data Manager server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216746 - https://github.com/dns-stats/hedgehog/pull/190 - https://github.com/dns-stats/hedgehog/commit/58922c345d3d1fe89bb2020111873a3e07ca93ac
CVE ID: CVE-2021-4277 State: PUBLISHED Published: 2022-12-25T10:20:15.885Z Last Updated: 2024-08-03T17:23:10.244Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: fredsmith Products: utils Problem Types: CWE-341 Description: A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshot_sync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is dbab1b66955eeb3d76b34612b358307f5c4e3944. It is recommended to apply a patch to fix this issue. The identifier VDB-216749 was assigned to this vulnerability. Additi
is recommended to apply a patch to fix this issue. The identifier VDB-216749 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.216749 - https://github.com/fredsmith/utils/commit/dbab1b66955eeb3d76b34612b358307f5c4e3944
CVE ID: CVE-2021-4278 State: PUBLISHED Published: 2022-12-25T15:53:03.430Z Last Updated: 2024-08-03T17:23:09.835Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: cronvel Products: tree-kit Problem Types: CWE-1321 Description: A vulnerability classified as problematic has been found in cronvel tree-kit up to 0.6.x. This affects an unknown part. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). Upgrading to version 0.7.0 is able to address this issue. The name of the patch is a63f559c50d70e8cb2eaae670dec25d1dbc4afcd. It is recommended to upgrade the affected component. The identifier VDB-216765
a63f559c50d70e8cb2eaae670dec25d1dbc4afcd. It is recommended to upgrade the affected component. The identifier VDB-216765 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216765 - https://vuldb.com/?ctiid.216765 - https://github.com/cronvel/tree-kit/commit/a63f559c50d70e8cb2eaae670dec25d1dbc4afcd - https://github.com/cronvel/tree-kit/releases/tag/v0.7.0
CVE ID: CVE-2021-4279 State: PUBLISHED Published: 2022-12-25T19:41:48.984Z Last Updated: 2024-08-03T17:23:10.074Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Starcounter-Jack Products: JSON-Patch Problem Types: CWE-1321 Description: A vulnerability has been found in Starcounter-Jack JSON-Patch up to 3.1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.1 is able to address this issue. The name
oit has been disclosed to the public and may be used. Upgrading to version 3.1.1 is able to address this issue. The name of the patch is 7ad6af41eabb2d799f698740a91284d762c955c9. It is recommended to upgrade the affected component. VDB-216778 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216778 - https://vuldb.com/?ctiid.216778 - https://github.com/Starcounter-Jack/JSON-Patch/pull/262 - https://github.com/Starcounter-Jack/JSON-Patch/commit/7ad6af41eabb2d799f698740a91284d762c955c9 - https://github.com/Starcounter-Jack/JSON-Patch/releases/tag/3.1.1
CVE ID: CVE-2021-4280 State: PUBLISHED Published: 2022-12-25T19:51:16.250Z Last Updated: 2025-04-14T17:26:58.635Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: n/a Products: styler_praat_scripts Problem Types: CWE-404 Description: A vulnerability was found in styler_praat_scripts. It has been classified as problematic. Affected is an unknown function of the file file_segmenter.praat of the component Slash Handler. The manipulation leads to denial of service. It is possible to launch the attack remotely. The name of the patch is 0cad44aa4a3eb0ecdba071c10eaff16023d8b35f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerabili
3eb0ecdba071c10eaff16023d8b35f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216780. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216780 - https://vuldb.com/?ctiid.216780 - https://github.com/stylerw/styler_praat_scripts/commit/0cad44aa4a3eb0ecdba071c10eaff16023d8b35f
CVE ID: CVE-2021-4281 State: PUBLISHED Published: 2022-12-26T19:38:13.757Z Last Updated: 2024-08-03T17:23:10.245Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Brave UX Products: for-the-badge Problem Types: CWE-78 Description: A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It is recommended to apply a patch to fix this issue. VDB-216842 is the identifier assigned to this vulnerability. Additional Analyst Notes:
apply a patch to fix this issue. VDB-216842 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216842 - https://vuldb.com/?ctiid.216842 - https://github.com/BraveUX/for-the-badge/pull/165 - https://github.com/BraveUX/for-the-badge/commit/55b5a234c0fab935df5fb08365bc8fe9c37cf46b
CVE ID: CVE-2021-4282 State: PUBLISHED Published: 2022-12-27T09:44:07.835Z Last Updated: 2024-08-03T17:23:09.871Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: FreePBX Products: voicemail Problem Types: CWE-79 Description: A vulnerability was found in FreePBX voicemail. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file page.voicemail.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 14.0.6.25 is able to address this issue. The name of the patch is 12e1469ef9208eda9d8955206e78345949236ee6. It is recommended to upgrade the affected component. T
he name of the patch is 12e1469ef9208eda9d8955206e78345949236ee6. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216871. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216871 - https://vuldb.com/?ctiid.216871 - https://github.com/FreePBX/voicemail/commit/12e1469ef9208eda9d8955206e78345949236ee6 - https://github.com/FreePBX/voicemail/releases/tag/release%2F14.0.6.25
CVE ID: CVE-2021-4283 State: PUBLISHED Published: 2022-12-27T09:46:16.138Z Last Updated: 2024-08-03T17:23:10.651Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: FreeBPX Products: voicemail Problem Types: CWE-79 Description: A vulnerability was found in FreeBPX voicemail. It has been rated as problematic. Affected by this issue is some unknown functionality of the file views/ssettings.php of the component Settings Handler. The manipulation of the argument key leads to cross site scripting. The attack may be launched remotely. Upgrading to version 14.0.6.25 is able to address this issue. The name of the patch is ffce4882016076acd16fe0f676246905aa3cb2f3. It is re