CVE-2021-37393

{"id": "CVE-2021-37393", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2021-07-26T18:15:08.550", "references": [{"url": "https://gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/ralap-z/RPCMS/", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "In RPCMS v1.8 and below, the \"nickname\" variable is not properly sanitized before being displayed on page. Attacker can use \"update password\" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS."}, {"lang": "es", "value": "En RPCMS versiones v1.8 y por debajo, la variable \"nickname\" no se sanea apropiadamente ntes de ser mostrada en la p\u00e1gina. El atacante puede usar la funci\u00f3n \"update password\" para inyectar cargas \u00fatiles de tipo XSS en la variable \"nickname\" y lograr un ataque de tipo XSS almacenado. Unos usuarios que vean los art\u00edculos publicados por el usuario inyectado activar\u00e1n el ataque de tipo XSS"}], "lastModified": "2021-08-06T16:16:15.627", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rpcms:rpcms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5755310D-B470-4257-9169-DC1AC3180438", "versionEndIncluding": "1.8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}