CVE-2021-4139: Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Published Dec 21, 2021
·Updated
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Software
1 affected component
Pimcore pimcore<10.2.7
Remediation
Event History
Dec 21, 2021
CVE Published
via MITRE·12:50 PM
Data Sourced
via MITRE·12:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-4139?
CVE-2021-4139 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2021-4139?
To fix CVE-2021-4139, upgrade to Pimcore version 10.2.7 or later.
3
What type of vulnerability is CVE-2021-4139?
CVE-2021-4139 is a Cross-site Scripting (XSS) vulnerability.
4
What software is affected by CVE-2021-4139?
CVE-2021-4139 affects all Pimcore versions prior to 10.2.7.
5
What impact does CVE-2021-4139 have on systems?
CVE-2021-4139 can allow attackers to inject malicious scripts into web pages viewed by other users.