CVE-2021-4296

CVSS V2 None CVSS V3 None
Description
A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 51f75c31f7fc33859a9a571311c67ae4e95d9c68. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217019.
Overview
  • CVE ID
  • CVE-2021-4296
  • Assigner
  • cna@vuldb.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-29T09:15:08
  • Last Modified Date
  • 2023-01-06T16:39:52
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:w3:unicorn:*:*:*:*:*:*:*:* 1 OR 2021-06-03
History
Created Old Value New Value Data Type Notes
2022-12-29 10:14:19 Added to TrackCVE
2022-12-29 10:14:19 Weakness Enumeration new
2022-12-29 14:14:14 2022-12-29T13:47:22 CVE Modified Date updated
2022-12-29 14:14:14 Received Awaiting Analysis Vulnerability Status updated
2022-12-29 14:14:16 CVSS V3 information new
2023-01-05 12:18:53 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-05 12:18:56 CVSS V3 information new
2023-01-06 18:21:57 2023-01-06T16:39:52 CVE Modified Date updated
2023-01-06 18:21:57 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-06 18:22:00 CPE Information updated
2023-01-06 18:22:00 CVSS V3 information new