Beveiligingsadvies

CVE-2021-25967

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-01 13:40:09

Laatst bijgewerkt 2025-04-30 15:44:12

Toegewezen door Mend

CVSS-score 5.4

Status PUBLISHED

Beschrijving

In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged application users to store malicious scripts in their profile picture. These scripts are executed in a victim’s browser when they open the malicious profile picture

← Alle CVE's bekijken Bekijk op cve.org ↗