CVE-2021-4274

CVSS V2 None CVSS V3 None
Description
A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout.html. The manipulation of the argument request_args leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ef6b32c527478fefe7a4436e10b96ee28ed5b308. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216479.
Overview
  • CVE ID
  • CVE-2021-4274
  • Assigner
  • cna@vuldb.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-21T19:15:14
  • Last Modified Date
  • 2022-12-30T21:52:17
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CWE-707 http://cwe.mitre.org/data/definitions/707.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:bird-lg_project:bird-lg:-:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://github.com/sileht/bird-lg/commit/ef6b32c527478fefe7a4436e10b96ee28ed5b308
https://github.com/sileht/bird-lg/pull/82
https://vuldb.com/?id.216479
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2021-4274
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4274
History
Created Old Value New Value Data Type Notes
2022-12-21 20:16:17 Added to TrackCVE
2022-12-21 20:16:18 Weakness Enumeration new
2022-12-23 13:14:55 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-30 22:15:21 2022-12-30T21:52:17 CVE Modified Date updated
2022-12-30 22:15:21 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-30 22:15:25 Weakness Enumeration update
2022-12-30 22:15:28 CPE Information updated