En resumen
- CVE-2021-25926 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a sickrage, sickrage (sickrage).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.82%, mayor que el 57.3% de las vulnerabilidades.
- Solución: actualizar a 10.0.11.dev2, 10.0.12.dev1, 10.0.11 o posterior.
| Package | Affected versions | Patched versions |
|---|
| sickrage PyPI | ≥ 9.3.54, < 10.0.11.dev2≥ 9.3.55, < 10.0.12.dev1
| 10.0.11.dev210.0.12.dev1
|
| sickrage | = 10.0.11≥ 9.3.54, < 10.0.11
| 10.0.11
|
Description
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the quicksearch feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
NVD description
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free