CVE-2021-37467: XSS
Published Jul 25, 2021
·Updated
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
Affected Software
1 affected component
Nchsoftware Quorum<=2.03
Event History
Jul 25, 2021
CVE Published
via MITRE·08:09 PM
Data Sourced
via MITRE·08:09 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37467?
CVE-2021-37467 is a vulnerability that allows for cross-site scripting (XSS) attacks in NCH Quorum v2.03 and earlier versions.
2
How severe is CVE-2021-37467?
CVE-2021-37467 has a severity rating of medium, with a CVSS score of 5.4.
3
What is the affected software for CVE-2021-37467?
The affected software for CVE-2021-37467 is NCH Quorum v2.03 and earlier versions.
4
How can XSS be exploited in CVE-2021-37467?
XSS can be exploited in CVE-2021-37467 through the /conferencebrowseuploadfile?confid= endpoint, where the reflected XSS occurs.
5
Are there any references for CVE-2021-37467?
Yes, references for CVE-2021-37467 can be found at the following URLs: [GitHub PoC](https://github.com/0xfml/poc/blob/main/NCH/Quorum_2.03_XSS.md) and [NCH Quorum Official Website](https://www.nch.com.au/conference/index.html).