Vulnerabilities

TI-2021-18849 CVE-2021-42564 · GHSA-pq7g-984r-4j7x

An open redirect through HTML injection in confidential messages in Cryptshare before…

LOW 26

An open redirect through HTML injection in confidential messages in Cryptshare before 5.1.0 allows remote attackers (with permission to provide confidential messages via Cryptshare) to redirect targeted victims to any UR…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00687 Published 2021-11-30 No fix listed CWE-601

TI-2021-02236 CVE-2021-3150 · GHSA-mvc4-q3cw-57vr

A cross-site scripting (XSS) vulnerability on the Delete Personal Data page in Cryptshare…

LOW 28

A cross-site scripting (XSS) vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00653 Published 2021-03-15 No fix listed CWE-79

Vulnerabilities

Filters

An open redirect through HTML injection in confidential messages in Cryptshare before…

A cross-site scripting (XSS) vulnerability on the Delete Personal Data page in Cryptshare…