CVE - CVE-2021-43810

CVE-ID
CVE-2021-43810	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts. This issue is patched in version 4.0.12.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://github.com/Admidio/admidio/security/advisories/GHSA-3qgf-qgc3-42hh URL:https://github.com/Admidio/admidio/security/advisories/GHSA-3qgf-qgc3-42hh MISC:https://github.com/Admidio/admidio/commit/c043267d362f7813543cc2785119bf3e3e54fe21 URL:https://github.com/Admidio/admidio/commit/c043267d362f7813543cc2785119bf3e3e54fe21 MISC:https://github.com/Admidio/admidio/commit/fcb0609abc1d2f65bc1377866bd678e5d891404b URL:https://github.com/Admidio/admidio/commit/fcb0609abc1d2f65bc1377866bd678e5d891404b MISC:https://github.com/Admidio/admidio/releases/tag/v4.0.12 URL:https://github.com/Admidio/admidio/releases/tag/v4.0.12
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20211116	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20211116)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)