medium6.1
CVE-2021-42650
Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates.
Impact
Cross Site Scripting (XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Portainer | Portainer | before 2.9.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/portainer/portainer/pull/5766
- https://github.com/purple-WL/Security-vulnerability/blob/main/Portainer%20Custom%20Templates%20xss
- https://github.com/portainer/portainer/pull/5766
- https://github.com/purple-WL/Security-vulnerability/blob/main/Portainer%20Custom%20Templates%20xss