« Volver al listado

CVE-2020-21101

Estado: ModificadaMedia (5.4)—

Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Screenly — Screenly

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-21101",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-04-29T17:15:08.877",
  "references": [
    {
      "url": "https://github.com/Screenly/screenly-ose/issues/1254",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/Screenly/screenly-ose/issues/1254",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de tipo Cross Site Scripting en Screenly screenly-ose todas las versiones, incluyendo la v1.8.2 (25-09-2019-Screenly-OSE-lite.img), en la página \"Add Asset\" por medio de la manipulación de un campo \"URL\", lo que podría permitir un usuario malicioso remoto ejecutar código arbitrario"
    }
  ],
  "lastModified": "2026-06-17T03:03:32.963",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.9:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CFB3738-DE0F-441B-A039-EAB2E42B3EF0"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.9.1:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8F7643E-4471-42E8-9B3C-49B1A112192E"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.10:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F247D15B-295C-47B6-A9BA-3A0E2A7539BE"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.11:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC608737-F5A3-45A9-91A8-BC3701935FEC"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.12:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78965B93-25A8-4CE3-A4F1-7EA423729646"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.12.1:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CD6D5ED-B489-416B-BAA7-A08AA26EE2E8"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.13:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7528E8E4-F7D0-43A1-8396-40250EA06E7B"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.14:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C8484A1-29B9-42B2-9575-2B4046441038"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.15:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B012DDE-AD03-4FF0-9D69-C4D3B2A5DA00"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.15.1:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15C2FCE5-2DBB-48D5-BDC2-E29D0EDCD8F8"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.16:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B17538D4-9B81-400D-AC99-C6B61C84124F"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.17:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FEFAC1AA-61FE-4FA8-8F5D-BFCF7DBCD90D"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.18:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E15080B4-6280-44DA-B5FA-8C75E354C702"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.18.1:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20C78F35-0B09-4676-9C71-3D37FFD42250"
            },
            {
              "criteria": "cpe:2.3:a:screenly:screenly:0.18.2:*:*:*:ose:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00E743C8-B290-4C3F-829E-03007AF4F7B0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}