critical9.8
CVE-2021-3346
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template.
Impact
Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nic | Foris | before 101.1 |
References
- NVD record
- CVE.org record
- https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst
- https://gitlab.nic.cz/turris/foris/foris/-/issues/201
- https://www.turris.com/
- https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst
- https://gitlab.nic.cz/turris/foris/foris/-/issues/201
- https://www.turris.com/