CVE-2021-35323

MEDIUMNuclei

Bludit 3.13.1 - 'username' Cross Site Scripting (XSS)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-35323 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Proofs of concept

1

Catalogued exploits

ExploitDBBludit 3.13.1 - 'username' Cross Site Scripting (XSS)ExploitDB exploitby VasuNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMBludit 3.13.1 - Cross Site ScriptingCVSS 6.1

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login

Impact

Attackers can inject malicious JavaScript via XSS in the username field, potentially stealing administrator session cookies or performing administrative actions.

Remediation

Bludit v4.0.0

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscve2021cvebluditxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:bludit:bludit:3.13.1:*:*:*:*:*:*:*
Shodan: title:"Bludit"
Shodan: http.title:"bludit"
FOFA: title="bludit"
Google: intitle:"bludit"
https://github.com/bludit/bludit/issues/1327 https://nvd.nist.gov/vuln/detail/CVE-2021-35323 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

3