CVE-2021-3831

MEDIUMNuclei

Cross-site Scripting (XSS) - Reflected in gnuboard/gnuboard5

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-3831 has a selected CVSS score of 6.1 (medium); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

gnuboard/gnuboard5

Browse gnuboard / gnuboard/gnuboard5
CVE ListBefore 5.4.20affected

Proofs of concept

1

Repository PoCs

GitHubaratane/CVE-2021-3831Repository PoCby aratane0Not analyzed2 files

4.2 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryMEDIUMGnuboard 5 - Cross-Site ScriptingCVSS 5.4

Gnuboard 5 contains a cross-site scripting vulnerability via the $_GET['LGD_OID'] parameter.

Impact

Attackers can inject malicious JavaScript via XSS in the LGD_OID parameter, potentially stealing user session cookies or performing unauthorized actions.

Remediation

Apply security patches or upgrade to a patched version of Gnuboard 5.

WeaknessesCWE-80
Authorsarafatansari
Template tagscvecve2021gnuboardxsshuntrvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:gnuboard:gnuboard5:*:*:*:*:*:*:*:*
Shodan: http.html:"gnuboard5"
https://huntr.dev/bounties/ed317cde-9bd1-429e-b6d3-547e72534dd5/ https://vulners.com/huntr/25775287-88CD-4F00-B978-692D627DFF04 https://nvd.nist.gov/vuln/detail/CVE-2021-3831

Source: ProjectDiscovery

References

3