CVE-2021-27915

216.73.216.233

· Published 17/09/2024 14:15 · Modified 29/09/2024 00:22

Labels: CVE-2021-27915 2024-09-17 CVE-2021-27915 CWE-79 CWE-80 [email protected]

Essential information

Published: 17/09/2024 14:15
Modified: 29/09/2024 00:22
Author: —
Creator: —
CVSS: 9.0 CRITICAL (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CVSS metrics

Description

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions. This could lead to the user having elevated access to the system.

NVD status

Status: Analyzed — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
acquia / mautic	`cpe:2.3:a:acquia:mautic::::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:-::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:beta2::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:beta3::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:beta4::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:rc1::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:rc2::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:rc3::::::`
acquia / mautic	`cpe:2.3:a:acquia:mautic:1.0.0:rc4::::::`