« Volver al listado

CVE-2026-42451

Estado: AplazadaMedia (6.3)—

Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting (XSS) vulnerability in Grimmory's browser-based EPUB reader allows an attacker to embed arbitrary JavaScript in a crafted EPUB file. When a victim opens the book, the script executes in their browser with full access to the Grimmory application's session context. This can enable session token theft and account takeover, including administrative access if an administrator opens the affected book. This issue has been patched in version 2.3.1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Grimmory — GrimmoryAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-42451",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-42451",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-12T13:16:55.827303Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.3,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.5,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "grimmory-tools",
          "product": "grimmory",
          "versions": [
            {
              "status": "affected",
              "version": "< 2.3.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-05-08T23:16:38.680",
  "references": [
    {
      "url": "http://github.com/grimmory-tools/grimmory/releases/tag/v2.3.1",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/grimmory-tools/grimmory/security/advisories/GHSA-frv6-5wq5-9p24",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        },
        {
          "lang": "en",
          "value": "CWE-80"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting (XSS) vulnerability in Grimmory's browser-based EPUB reader allows an attacker to embed arbitrary JavaScript in a crafted EPUB file. When a victim opens the book, the script executes in their browser with full access to the Grimmory application's session context. This can enable session token theft and account takeover, including administrative access if an administrator opens the affected book. This issue has been patched in version 2.3.1."
    },
    {
      "lang": "es",
      "value": "Grimmory es una biblioteca digital autoalojada. Antes de la versión 2.3.1, una vulnerabilidad de cross-site scripting (XSS) almacenado en el lector de EPUB basado en navegador de Grimmory permite a un atacante incrustar JavaScript arbitrario en un archivo EPUB manipulado. Cuando una víctima abre el libro, el script se ejecuta en su navegador con acceso completo al contexto de sesión de la aplicación Grimmory. Esto puede permitir el robo de tokens de sesión y la toma de control de cuentas, incluyendo acceso administrativo si un administrador abre el libro afectado. Este problema ha sido parcheado en la versión 2.3.1."
    }
  ],
  "lastModified": "2026-07-24T21:10:00.143",
  "sourceIdentifier": "security-advisories@github.com"
}