CVE-2021-30146: XSS
Published Apr 6, 2021
·Updated
Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality."
Affected Software
1 affected component
Seafile Seafile=7.0.5
Event History
Apr 6, 2021
Exploit Published
via GitHub·09:16 AM
CVE Published
via MITRE·03:51 PM
Data Sourced
via MITRE·03:51 PM
Description
Frequently Asked Questions
1
What is CVE-2021-30146?
CVE-2021-30146 is a vulnerability in Seafile 7.0.5 that allows Persistent XSS via the "share of library functionality."
2
How severe is CVE-2021-30146?
CVE-2021-30146 has a severity rating of medium with a severity value of 5.4.
3
What software is affected by CVE-2021-30146?
Seafile 7.0.5 is affected by CVE-2021-30146.
4
What is the Common Weakness Enumeration (CWE) of CVE-2021-30146?
CVE-2021-30146 is associated with CWE-79 (Improper Neutralization of Input During Web Page Generation).
5
How can CVE-2021-30146 be mitigated?
To mitigate CVE-2021-30146, it is recommended to update Seafile to a version that addresses the vulnerability.