CVE-2021-32812

Name: CVE-2021-32812
Creator: NVD / NIST
Published: 2021-08-02T23:15:08.02+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 6.1/10EPSS 0.83%

Last modified Jun 17, 2026

CVE-2021-32812 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. Monkshu is an enterprise application server for mobile apps (iOS and Android), responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. EPSS estimates a 0.83% chance of exploitation in the next 30 days.

Description

Monkshu is an enterprise application server for mobile apps (iOS and Android), responsive HTML 5 apps, and JSON API services. In version 2.90 and earlier, there is a reflected cross-site scripting vulnerability in frontend HTTP server. The attacker can send in a carefully crafted URL along with a known bug in the server which will cause a 500 error, and the response will then embed the URL provided by the hacker. The impact is moderate as the hacker must also be able to craft an HTTP request which should cause a 500 server error. None such requests are known as this point. The issue is patched in version 2.95. As a workaround, one may use a disk caching plugin.

Metrics

CVSS 3.1

6.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Probability

0.83%

52.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Tekmonks	Monkshu	2.90

References

https://github.com/TekMonksGitHub/monkshu/commit/4601a9bfdc934d7ac32619ce621652fad0cf452bPatch, Third Party Advisory
https://github.com/TekMonksGitHub/monkshu/releases/tag/v2.95Third Party Advisory
https://github.com/TekMonksGitHub/monkshu/security/advisories/GHSA-hcpx-66hq-7g4xThird Party Advisory
https://github.com/TekMonksGitHub/monkshu/commit/4601a9bfdc934d7ac32619ce621652fad0cf452bPatch, Third Party Advisory
https://github.com/TekMonksGitHub/monkshu/releases/tag/v2.95Third Party Advisory
https://github.com/TekMonksGitHub/monkshu/security/advisories/GHSA-hcpx-66hq-7g4xThird Party Advisory

Timeline

Published: Aug 2, 2021
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2021-32812?

How severe is CVE-2021-32812?

CVE-2021-32812 has a CVSS score of 6.1/10 (MEDIUM severity). The EPSS model estimates a 0.83% probability of exploitation in the next 30 days.

How do I fix CVE-2021-32812?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-32812?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST