CVE-2021-4255 - ctrlo lenio contractor.tt cross site scripting

Back Back to CVE browser

MEDIUM

ctrlo lenio contractor.tt cross site scripting

Published Dec 18, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.40%

Description

A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. The manipulation of the argument contractor.name leads to cross site scripting. The attack may be launched remotely. The name of the patch is e1646d5cd0a2fbab9eb505196dd2ca1c9e4cdd97. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216212.

Affected products

Vendor Ctrlo Product Lenio Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ctrlo

Lenio

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-707

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34101
Advisory
https://github.com/ctrlo/lenio/commit/e1646d5cd0a2fbab9eb505196dd2ca1c9e4cdd97
PatchThird Party Advisory
https://vuldb.com/?id.216212
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34101		Advisory
https://github.com/ctrlo/lenio/commit/e1646d5cd0a2fbab9eb505196dd2ca1c9e4cdd97		PatchThird Party Advisory
https://vuldb.com/?id.216212		Third Party Advisory