Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2021-41172

Self-XSS in AS_Redis

Description

AS_Redis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is patched in version 0.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Medicean AS_Redis

  • < 0.5affected

References