Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2021-42856

Reflected Cross-site Scripting at DsaDataTest

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GovTech CSG

Description

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Aternity SteelCentral AppInternals Dynamic Sampling Agent

  • 10.xaffected
  • 12.13.0 to < 12.13.0affected
  • 11.8.8 to < 11.8.8affected

References