npm/xo-server CVE-2021-36383: medium 4.3, EPSS 0.71%
Xen Orchestra Mishandles Authorization
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.84.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-grvm-gcqf-gh8q#npm/xo-server
- https://nvd.nist.gov/vuln/detail/CVE-2021-36383
- https://github.com/vatesfr/xen-orchestra/issues/5712
- https://github.com/vatesfr/xen-orchestra
CVE-2021-36383 · published · modified · JSON