medium4.8
CVE-2021-35238
User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.
Impact
User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Orion Platform | through 2020.2.5 Version 2020.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
- https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35238
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
- https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35238