CVE-2021-32544 : Special characters of IGT search function in igt+ ...

CVE-2021-32544 : Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can ... (e.g.:CVE-2009-1234or2010-1234or20101234) LogIn   Register   TakeathirdpartyriskmanagementcourseforFREE VulnerabilityFeeds&WidgetsNew   www.itsecdb.com   Switchtohttps:// Home Browse: Vendors Products VulnerabilitiesByDate VulnerabilitiesByType Reports: CVSSScoreReport CVSSScoreDistribution Search: VendorSearch ProductSearch VersionSearch VulnerabilitySearch ByMicrosoftReferences Top50: Vendors VendorCvssScores Products ProductCvssScores Versions Other: MicrosoftBulletins BugtraqEntries CWEDefinitions About&Contact Feedback CVEHelp FAQ Articles ExternalLinks: NVDWebsite CWEWebSite ViewCVE: (e.g.:CVE-2009-1234or2010-1234or20101234) ViewBID: (e.g.:12345) SearchByMicrosoftReferenceID: (e.g.:ms10-001or979352) VulnerabilityDetails:CVE-2021-32544 SpecialcharactersofIGTsearchfunctioninigt+arenotfilteredinspecificfields,whichallowremoteauthenticatedattackerscaninjectmaliciousJavaScriptandcarryoutDOM-basedXSS(Cross-sitescripting)attacks. PublishDate:2021-05-11 LastUpdateDate:2021-05-14 CollapseAll   ExpandAll   Select   Select&Copy   ScrollTo  VendorStatements(0) AdditionalVendorData(0) OVALDefinitions(0) VulnerableProducts(0) #OfVulnsByProducts References(0) MetasploitModules(0) Comments  ViewUserComments AddComment ExternalLinks  SecuniaAdvisories XForceAdvisories VulnerabilityDetailsatNVD VulnerabilityDetailsatMitre NessusPlugins LinuxKernelGitRepository FirstCVSSGuide SearchTwitter   SearchYouTube   SearchGoogle - CVSSScores&VulnerabilityTypes CVSSScore 3.5 ConfidentialityImpact None (Thereisnoimpacttotheconfidentialityofthesystem.) IntegrityImpact Partial (Modificationofsomesystemfilesorinformationispossible,buttheattackerdoesnothavecontroloverwhatcanbemodified,orthescopeofwhattheattackercanaffectislimited.) AvailabilityImpact None (Thereisnoimpacttotheavailabilityofthesystem.) AccessComplexity Medium (Theaccessconditionsaresomewhatspecialized.Somepreconditionsmustbesatistifiedtoexploit) Authentication ??? GainedAccess None VulnerabilityType(s) CrossSiteScripting CWEID 79 - ProductsAffectedByCVE-2021-32544 # ProductType Vendor Product Version Update Edition Language 1 Application Igt\Project Igt\ - * * * VersionDetails&nbspVulnerabilities - NumberOfAffectedVersionsByProduct Vendor Product VulnerableVersions Igt\Project Igt\ 1 - ReferencesForCVE-2021-32544 https://www.twcert.org.tw/tw/cp-132-4719-e298a-1.htmlCONFIRMN/A - MetasploitModulesRelatedToCVE-2021-32544 TherearenotanymetasploitmodulesrelatedtothisCVEentry(Pleasevisitwww.metasploit.comformoreinformation) Howdoesitwork?Knownlimitations&technicaldetails   Useragreement,disclaimerandprivacystatement   About&Contact   Feedback CVEisaregistredtrademarkoftheMITRECorporationandtheauthoritativesourceofCVEcontentis MITRE'sCVEwebsite. CWEisaregistredtrademarkoftheMITRECorporationandtheauthoritativesourceofCWEcontentis MITRE'sCWEwebsite. OVALisaregisteredtrademarkofTheMITRECorporationandtheauthoritativesourceofOVALcontentis MITRE'sOVALwebsite. UseofthisinformationconstitutesacceptanceforuseinanASIScondition. ThereareNOwarranties,impliedorotherwise,withregardtothisinformationoritsuse. Anyuseofthisinformationisattheuser'srisk. Itistheresponsibilityofusertoevaluatetheaccuracy,completenessorusefulnessofanyinformation,opinion,adviceorothercontent. EACHUSERWILLBESOLELYRESPONSIBLEFORANYconsequencesofhisorherdirectorindirectuseofthiswebsite. ALLWARRANTIESOFANYKINDAREEXPRESSLYDISCLAIMED.ThissitewillNOTBELIABLEFORANYDIRECT, INDIRECToranyotherkindofloss.