Skip to content
OpenAdvisories
Low · 3.5 CVE-2021-42117 EUVD-2021-29102GHSA-g32j-w768-4w3j

UI Redressing in TopEase

Published Nov 30, 2021 · Updated Aug 4, 2024 · Assigned by NCSC.ch

Description

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution.

Affected products

VendorProductAffectedFixed
Business-DNA Solutions TopEase unspecified – ≤ 7.1.27 —

References