CVE-2021-31674 | BDVDB-2026-175019 Detail

Description#

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-in-undefined-enum-cve-2021-31674
https://www.exploit-db.com/exploits/50908
http://packetstormsecurity.com/files/167040/Cyclos-4.14.7-Cross-Site-Scripting.html

Exploit#

No public exploit known

History#

Version 12022-05-01Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.