CVE-2021-32616
High
Description
1CDN is open-source file sharing software. In 1CDN before commit f88a2730fa50fc2c2aeab09011f6f142fd90ec25, there is a basic cross-site scripting vulnerability that allows an attacker to inject /<script>//code</script> and execute JavaScript code on the client side.
SeverityHigh
CVSS8.1
Exploit probability—
Product1cdn
PublishedMay 28, 2021
First seenMay 28, 2021
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- 1cdn_project 1cdn2021-05-16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 1cdn_project 1cdn | v < 2021-05-16 | 2021-05-16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.