CVE-2021-42552

Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vulnerability@ncsc.ch

Published

2022-03-16

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Archivistabox (Archivista)
• Archivistabox Webclient (Archivista Gmbh)

References

• https://it-sec.de/schwachstelle-in-archivista-dms/