CVE-2021-40272
published 2022-11-14CVE-2021-40272: OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).
PriorityP333medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
1.04%
59.6th percentile
OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| op5 | monitor | 8.3.0 – 8.3.3 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
IRTS OP5 Monitor - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2021-40272 [MEDIUM] IRTS OP5 Monitor - Cross-Site Scripting
IRTS OP5 Monitor - Cross-Site Scripting
OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).
Template:
id: CVE-2021-40272
info:
name: IRTS OP5 Monitor - Cross-Site Scripting
author: ritikchaddha
severity: medium
description: |
OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).
impact: |
Successful exploitation could lead to unauthorized access or data theft.
remediation: |
Update to the latest version of OP5 Monitor to mitigate the XSS vulnerability.
reference:
- https://github.com/hosakauk/exploits/blob/master/itrs_op5_monitor_xss.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2021-40272
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cve-id: CVE-2021-40272
cwe-id: CWE-79
epss-score: 0.04872
eps
No writeups or analysis indexed.
2022-11-14
Published