CVE-2021-3914: XSS

Reference Links

• https://nvd.nist.gov/vuln/detail/CVE-2021-3914
• https://access.redhat.com/security/cve/CVE-2021-3914
• https://bugzilla.redhat.com/show_bug.cgi?id=2018015
• https://github.com/smallrye/smallrye-health/pull/333
• https://github.com/smallrye/smallrye-health/commit/01b25a038824887363cd413d8cd14052f5fc3541
• https://github.com/smallrye/smallrye-health/commit/47a33f19f5bb1e4216a15f3aee6ca3b1e2ccba59
• https://github.com/advisories/GHSA-pvc3-wvxr-7cmf (Advisory)
• https://access.redhat.com/errata/RHSA-2022:4623
• https://access.redhat.com/security/cve/cve-2021-3914
• https://www.cve.org/CVERecord?id=CVE-2021-3914 https://nvd.nist.gov/vuln/detail/CVE-2021-3914

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2022:4623

Frequently Asked Questions

• What is CVE-2021-3914?

  CVE-2021-3914 is a vulnerability in the smallrye health metrics UI component that allows for cross-site scripting attacks.

• What is the severity of CVE-2021-3914?

  The severity of CVE-2021-3914 is medium with a CVSS score of 6.5.

• How does CVE-2021-3914 affect the affected software?

  CVE-2021-3914 affects the smallrye health metrics UI component.

• What is the Common Weakness Enumeration (CWE) for CVE-2021-3914?

  The CWE for CVE-2021-3914 is CWE-79, which is a vulnerability related to cross-site scripting (XSS).

• How can I fix CVE-2021-3914?

  To fix CVE-2021-3914, it is recommended to upgrade to the latest version of smallrye health metrics UI component that includes the patch for this vulnerability.