Lucene search

[email protected]CVE-2021-37573

HistoryAug 09, 2021 - 1:15 p.m.

CVE-2021-37573

2021-08-0913:15:07

CWE-79

[email protected]

web.nvd.nist.gov

cve

2021

37573

reflected xss

web server

ttiny java web server

tjws

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.003 Low

EPSS

Percentile

69.8%

JSON

A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server’s “404 Page not Found” error page

Affected configurations

NVD

Node

tiny_java_web_server_projecttiny_java_web_serverRange≤1.115

CPENameOperatorVersion
tiny_java_web_server_project:tiny_java_web_servertiny java web server project tiny java web serverle1.115

CPE	Name	Operator	Version
tiny_java_web_server_project:tiny_java_web_server	tiny java web server project tiny java web server	le	1.115

References

packetstormsecurity.com/files/163825/Tiny-Java-Web-Server-1.115-Cross-Site-Scripting.html

seclists.org/fulldisclosure/2021/Aug/13

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-042.txt

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.003 Low

EPSS

Percentile

69.8%

JSON

Related for CVE-2021-37573

prion1 packetstorm1 nuclei1 cvelist1 nvd1