Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-42552 EUVD-2021-29520GHSA-xjmw-fgrv-38gm

Reflected XSS in Archivista

Published Mar 16, 2022 · Updated Aug 4, 2024 · Assigned by NCSC.ch

Description

Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I.

Affected products

VendorProductAffectedFixed
Archivista ArchivistaBox webclient unspecified – < 2022/I 2022/I

References