{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionToken parameter of multiple methods in Simple HTTP API. This is resolved in 5.9.1 and 5.10."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-06-09T14:33:39", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.cloverdx.com/releases/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support1.cloverdx.com/hc/en-us/articles/360021006520"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2021-30133", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionToken parameter of multiple methods in Simple HTTP API. This is resolved in 5.9.1 and 5.10."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://support.cloverdx.com/releases/", "refsource": "MISC", "url": "https://support.cloverdx.com/releases/"}, {"name": "https://support1.cloverdx.com/hc/en-us/articles/360021006520", "refsource": "CONFIRM", "url": "https://support1.cloverdx.com/hc/en-us/articles/360021006520"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T22:24:59.558Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.cloverdx.com/releases/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support1.cloverdx.com/hc/en-us/articles/360021006520"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2021-30133", "datePublished": "2021-06-09T14:33:39", "dateReserved": "2021-04-05T00:00:00", "dateUpdated": "2024-08-03T22:24:59.558Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cloverdx:cloverdx:*:*:*:*:*:*:*:*", "matchCriteriaId": "23E4CF2F-FF43-409B-9C2A-A485899A4914", "versionEndIncluding": "5.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cloverdx:cloverdx:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F774EF6-503D-47C5-BDCE-016A10196A32", "versionEndExcluding": "5.9.1", "versionStartIncluding": "5.9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cloverdx:cloverdx:5.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "ED3261BC-5D26-4353-BE55-81BFCA47CC91", "vulnerable": true}, {"criteria": "cpe:2.3:a:cloverdx:cloverdx:5.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "E79806F1-805B-42DC-BFAB-936420665734", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionToken parameter of multiple methods in Simple HTTP API. This is resolved in 5.9.1 and 5.10."}, {"lang": "es", "value": "Una vulnerabilidad de tipo cross-site scripting (XSS) en CloverDX Server versiones 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0 y versiones anteriores permite a atacantes remotos inyectar script web o HTML arbitrario por medio del par\u00e1metro sessionToken de m\u00faltiples m\u00e9todos en la API HTTP simple. Esto es resuelto en versiones 5.9.1 y 5.10"}], "id": "CVE-2021-30133", "lastModified": "2024-11-21T06:03:22.330", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "[email protected]", "type": "Primary"}]}, "published": "2021-06-09T15:15:08.540", "references": [{"source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.cloverdx.com/releases/"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "https://support1.cloverdx.com/hc/en-us/articles/360021006520"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes", "Vendor Advisory"], "url": "https://support.cloverdx.com/releases/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://support1.cloverdx.com/hc/en-us/articles/360021006520"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Primary"}]}

{}