CVE-2021-32828
1 advisory.
Maven/org.nuxeo.ecm.platform:nuxeo-platform-oauth CVE-2021-32828: medium 5.4
Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 10.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-x347-fc9w-w7c3
- https://nvd.nist.gov/vuln/detail/CVE-2021-32828
- https://github.com/nuxeo/nuxeo
- https://github.com/nuxeo/nuxeo/blob/master/modules/platform/nuxeo-platform-oauth/src/main/java/org/nuxeo/ecm/webengine/oauth2/OAuth2Callback.java
- https://securitylab.github.com/advisories/GHSL-2021-072-nuxeo
CVE-2021-32828 · published · modified · JSON