CVE-2021-30133 | BDVDB-2026-155144 Detail

Description#

A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionToken parameter of multiple methods in Simple HTTP API. This is resolved in 5.9.1 and 5.10.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.cloverdx.com/releases/
https://support1.cloverdx.com/hc/en-us/articles/360021006520

Exploit#

No public exploit known

History#

Version 12021-06-09Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.