CVE-2021-42357
DOM based XSS Vulnerability in Apache Knox
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 2.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
17 jan 2022Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.
Produtos afetados
Apache Software Foundation · Apache KnoxQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →