Home > Vulnerability Database > CVE-2021-4269

Mend.io Vulnerability Database

CVE-2021-4269

Date: December 20, 2022

A vulnerability has been found in SimpleRisk and classified as problematic. This vulnerability affects the function checkAndSetValidation of the file simplerisk/js/common.js. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 20220306-001 is able to address this issue. The name of the patch is 591405b4ed160fbefc1dca1e55c5745079a7bb48. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216472.

Language: PHP

Severity Score

3.5

Related Resources (5)

Url: https://github.com/simplerisk/code/releases/tag/20220306-001

Url: https://github.com/simplerisk/code/commit/591405b4ed160fbefc1dca1e55c5745079a7bb48

Url: https://vuldb.com/?id.216472

Url: https://nvd.nist.gov/vuln/detail/CVE-2021-4269

Url: https://www.mend.io/vulnerability-database/CVE-2021-4269

Severity Score

3.5

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

Improper Neutralization

CWE-707

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-74

CVSS v3.1

Base Score:	3.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

Mend.io Vulnerability Database

We found results for “”

CVE-2021-4269

Date: December 20, 2022

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?