THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-30119 (MEDIUM 5.4) — Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?resul

[NVD] CVE-2021-30119 (MEDIUM 5.4) — Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?resul

lownvdPublished 2021-07-09

CVE-2021-30119 CVSS: 5.4 MEDIUM Published: 2021-07-09T14:15:07.873

Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=<script>alert(document.cookie)</script>` The same

Indicators of compromise

CVE-2021-30119cve
https://x.x.x.x/HelpDeskTab/rcResults.asp?resulurl
https://x.x.x.x/HelpDeskTab/rcResults.asp?result=url
https://x.x.x.x/done.asp?FileName=url

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-30119