CVE-2021-3150
Last modified
CVE-2021-3150 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A cross-site scripting (XSS) vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name. The issue is fixed with the version 4.8.1. EPSS estimates a 0.63% chance of exploitation in the next 30 days.
Description
A cross-site scripting (XSS) vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name. The issue is fixed with the version 4.8.1
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cryptshare | Cryptshare Server | < 4.8.0 |
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10356Third Party Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10356Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-3150?
How severe is CVE-2021-3150?
How do I fix CVE-2021-3150?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-31494This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31495This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31496This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31497This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31498This vulnerability allows remote attackers to disclose sensi…3.3
- CVE-2021-31499This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31500This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31501This vulnerability allows remote attackers to disclose sensi…3.3
- CVE-2021-31502This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31503This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31504This vulnerability allows remote attackers to execute arbitr…7.8
- CVE-2021-31505This vulnerability allows attackers with physical access to …6.8
Are you affected by CVE-2021-3150?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST