CVE-2021-37456: XSS
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37456?
CVE-2021-37456 is a vulnerability that allows for Cross Site Scripting (XSS) attacks in NCH Axon PBX v2.22 and earlier versions through the blacklist IP address feature.
How severe is CVE-2021-37456?
CVE-2021-37456 has a severity rating of 5.4, which is considered medium.
How does CVE-2021-37456 affect NCH Axon PBX?
CVE-2021-37456 affects NCH Axon PBX versions 2.22 and earlier, allowing for Cross Site Scripting (XSS) attacks through the blacklist IP address functionality.
What is Cross Site Scripting (XSS)?
Cross Site Scripting (XSS) is a type of vulnerability that allows attackers to inject malicious scripts into web pages viewed by users.
How can I mitigate CVE-2021-37456 in NCH Axon PBX?
To mitigate CVE-2021-37456, it is recommended to update NCH Axon PBX to a version beyond 2.22 that includes a fix for the vulnerability.