CVE-2021-32542
Medium
Description
The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token that triggered the attack.
SeverityMedium
CVSS4.7
Exploit probability—
ProductSysjust Cts Web
PublishedMay 28, 2021
First seenMay 28, 2021
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- sysjust cts_web2021.3.24 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sysjust cts_web | v < 2021.3.24 | 2021.3.24 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.