Non évaluée

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a p...

CVE-2021-32607 Première détection SecPulse May 13, 2021

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private message.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch github.com
report blog.sonarsource.com

Faits clés

Gravité: Non évaluée
Publication: May 13, 2021
Première détection SecPulse: May 13, 2021

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54