CVE-2021-3914: XSS
Published Oct 27, 2021
·Updated
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.
Affected Software
5 affected componentsFixes available
maven/io.smallrye:smallrye-health-ui<3.1.2
3.1.2
redhat Build Of Quarkus<2.7.5
redhat Build Of Quarkus
redhat Openshift Application Runtimes=1.0
redhat Smallrye Health
Event History
Oct 27, 2021
CVE Published
12:00 AM
Data Sourced
12:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 28, 2021
Data Sourced
via Red Hat·01:16 AM
DescriptionSeverityAffected Software
Aug 25, 2022
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
DescriptionWeakness
Aug 26, 2022
Advisory Published
12:03 AM
Frequently Asked Questions
1
What is CVE-2021-3914?
CVE-2021-3914 is a vulnerability in the smallrye health metrics UI component that allows for cross-site scripting attacks.
2
What is the severity of CVE-2021-3914?
The severity of CVE-2021-3914 is medium with a CVSS score of 6.5.
3
How does CVE-2021-3914 affect the affected software?
CVE-2021-3914 affects the smallrye health metrics UI component.
4
What is the Common Weakness Enumeration (CWE) for CVE-2021-3914?
The CWE for CVE-2021-3914 is CWE-79, which is a vulnerability related to cross-site scripting (XSS).
5
How can I fix CVE-2021-3914?
To fix CVE-2021-3914, it is recommended to upgrade to the latest version of smallrye health metrics UI component that includes the patch for this vulnerability.