CVE-2021-32852

CRITIQUE 9.0CVE-2021-32852 · Published 20/02/2023 · updated 17/06/2026

En bref

CVE-2021-32852 est une vulnérabilité CRITIQUE (CVSS 9.0) touchant countly server (count).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.93%, plus élevée que 60.7% des vulnérabilités.
Correctif : mettre à jour vers 21.11 ou plus récent.

Package	Affected versions	Patched versions
countly server count	`< 21.11`	`21.11`

Description

Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11 of the community edition. The victim must follow a malicious link or be redirected there from malicious web site. The attacker must have an account or be able to create one. This issue is patched in version 21.11.

References

Countly/countly-server · Third Party Advisory
Countly/countly-server · Third Party Advisory
Countly/countly-server release v21.11 · Release Notes
securitylab.github.com/advisories/GHSL-2021-104-countly-server · Exploit

Autres vulnérabilités de countly server

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free