CVE-2021-34370
published 2021-06-09CVE-2021-34370: Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are…
PriorityP341medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
10.00%
95.0th percentile
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| accela | civic_platform | <= 20.1 | — |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS)
exploitdb·2021-06-14·CVSS 6.1
CVE-2021-34370 [MEDIUM] Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS)
Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS)
---
# Exploit Title: Accela Civic Platform 21.1 - 'successURL' Cross-Site-Scripting (XSS)
# Software Link: https://www.accela.com/civic-platform/
# Version: document.location=''^alert`1`^''
Response Heeaders end
Payload: %27^alert`1`^%27
for open redirect, replace the payload to a valid website.
Nuclei
Accela Civic Platform <=21.1 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2021-34370 [MEDIUM] Accela Civic Platform <=21.1 - Cross-Site Scripting
Accela Civic Platform 21.1) that includes proper input validation and sanitization.
reference:
- https://www.exploit-db.com/exploits/49990
- https://www.accela.com/civic-platform/
- https://gist.github.com/0xx7/7e9f1b725f7ff98b9239d3cb027b7dc8
- https://nvd.nist.gov/vuln/detail/CVE-2021-34370
- https://github.com/ARPSyndicate/cvemon
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2021-34370
cwe-id: CWE-79
epss-score: 0.11651
epss-percentile: 0.93681
cpe: cpe:2.3:a:accela:civic_platform:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: accela
product: civic_platform
tags: cve,cve2021,xss,redirect,accela,edb,vuln
http:
- method: GET
path:
- "{{BaseURL}}/ssoAdapter/logoutAction.do?servProvCode=SAFVC&successURL=https://interact.sh/"
match
No writeups or analysis indexed.
http://packetstormsecurity.com/files/163115/Accela-Civic-Platform-21.1-Cross-Site-Scripting-Open-Redirection.htmlhttps://gist.github.com/0xx7/7e9f1b725f7ff98b9239d3cb027b7dc8http://packetstormsecurity.com/files/163115/Accela-Civic-Platform-21.1-Cross-Site-Scripting-Open-Redirection.htmlhttps://gist.github.com/0xx7/7e9f1b725f7ff98b9239d3cb027b7dc8
2021-06-09
Published