En bref
- CVE-2021-25926 est une vulnérabilité MOYENNE (CVSS 6.1) touchant sickrage, sickrage (sickrage).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.82%, plus élevée que 57.3% des vulnérabilités.
- Correctif : mettre à jour vers 10.0.11.dev2, 10.0.12.dev1, 10.0.11 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| sickrage PyPI | ≥ 9.3.54, < 10.0.11.dev2≥ 9.3.55, < 10.0.12.dev1
| 10.0.11.dev210.0.12.dev1
|
| sickrage | = 10.0.11≥ 9.3.54, < 10.0.11
| 10.0.11
|
Description
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the quicksearch feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
NVD description
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free