Lucene search

MitreCVE-2021-41747

HistoryOct 22, 2021 - 12:15 p.m.

CVE-2021-41747

2021-10-2212:15:09

CWE-79

mitre

web.nvd.nist.gov

cve-2021-41747

cross-site scripting

xss

csdn app

security vulnerability

sensitive information

user cookies

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

29.5%

JSON

Cross-Site Scripting (XSS) vulnerability exists in Csdn APP 4.10.0, which can be exploited by attackers to obtain sensitive information such as user cookies.

Affected configurations

Nvd

Node

csdncsdn_appMatch4.10.0

VendorProductVersionCPE
csdncsdn_app4.10.0cpe:2.3:a:csdn:csdn_app:4.10.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
csdn	csdn_app	4.10.0	cpe:2.3:a:csdn:csdn_app:4.10.0:::::::*

References

github.com/purple-WL/Security-vulnerability/blob/main/Csdn%20APP%204.10.0%20XSS

www.cnvd.org.cn/flaw/show/CNVD-2021-52394

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

29.5%

JSON

Related for CVE-2021-41747