p PatchFirst

CVE-2021-41261

CVE-2021-41261 · Stored Cross-site Scripting in Galette

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 are subject to stored cross site scripting attacks via the preferences footer. The preference footer can only be altered by a site admin. This issue has been resolved in the 0.9.6 release and all users are advised to upgrade. There are no known workarounds.

CVSS 8.1 · Alta · EPSS 0,6%

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • galette

    Versiones
    • < 0.9.6: Afectada

    Sin corrección publicada

  • galette Ubuntu:16.04:LTS

    Versiones
    • 0.8+dfsg-1
    • 0.8+dfsg-1ubuntu1
    Intervalos de versiones afectados
    • ECOSYSTEM: (−∞, +∞)

    Sin corrección publicada

Fuentes originales

Comprueba tu servidor →