Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter.
References
Link | Resource |
---|---|
https://www.faraday.net/products/faradayedge | Product |
https://github.com/Pho03niX/CVE-2021-27338/blob/main/CVE-2021-27338 | Third Party Advisory |
Configurations
Information
Published : 2021-07-20 05:15
Updated : 2021-07-29 06:19
NVD link : CVE-2021-27338
Mitre link : CVE-2021-27338
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
faraday
- edge