CVE-2021-4296CWE-79

w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting

Low · published December 29, 2022

CVSS v3.1
3.5
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, has been found in w3c Unicorn. This issue affects the function ValidatorNuMessage of the file src/org/w3c/unicorn/response/impl/ValidatorNuMessage.java. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 51f75c31f7fc33859a9a571311c67ae4e95d9c68. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217019.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00540 · 44.6th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-12-29T08:52Z
EPSS history
Timeline
  • 29 DEC 08:52Z
    w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting
    cvelistv5