CVE-2021-4124: Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway
Published Dec 16, 2021
·Updated
janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Software
1 affected component
meetecho janus<=0.11.6
Remediation
Event History
Dec 16, 2021
CVE Published
via MITRE·01:15 PM
Data Sourced
via MITRE·01:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-4124.
2
What is the title of the vulnerability?
The title of the vulnerability is 'janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)'.
3
What is the affected software?
The affected software is Meetecho Janus version up to and including 0.11.6.
4
What is the severity of CVE-2021-4124?
The severity of CVE-2021-4124 is high.
5
How can I fix the vulnerability in janus-gateway?
To fix the vulnerability, update janus-gateway to a version higher than 0.11.6.