CVE-2021-37466: XSS
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37466?
CVE-2021-37466 is a vulnerability in NCH Quorum v2.03 and earlier that allows for a cross-site scripting (XSS) attack via the /conference?id= parameter.
How severe is CVE-2021-37466?
CVE-2021-37466 has a severity rating of medium, with a CVSS score of 5.4.
How does CVE-2021-37466 impact NCH Quorum?
CVE-2021-37466 allows attackers to exploit a reflected XSS vulnerability in NCH Quorum v2.03 and earlier, potentially leading to unauthorized access or data theft.
How can I fix CVE-2021-37466 in NCH Quorum?
To fix CVE-2021-37466 in NCH Quorum, it is recommended to update to a patched version of the software.
Where can I find more information about CVE-2021-37466?
More information about CVE-2021-37466 can be found in the references provided: https://github.com/0xfml/poc/blob/main/NCH/Quorum_2.03_XSS.md, https://www.nch.com.au/conference/index.html.