CVE-2021-35045

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-35045
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-35045.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-35045
Published
2021-06-22T14:15:08Z
Modified
2025-02-14T11:26:35.808784Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Cross site scripting (XSS) vulnerability in Ice Hrm 29.0.0.OS, allows attackers to execute arbitrary code via the parameters to the /app/ endpoint.

References

Affected packages

Git / github.com/gamonoid/icehrm

Affected ranges

Type
GIT
Repo
https://github.com/gamonoid/icehrm
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
45d80e94402fc3f96b534218c7e48433d793d675

Affected versions

13.*

13.1.OS

v13.*

v13.1.OS

v14.*

v14.0.OS
v14.1.OS

v15.*

v15.0.OS
v15.2.OS

v16.*

v16.0.OS
v16.1.OS

v18.*

v18.0.OS

v19.*

v19.0.OS

v20.*

v20.0.OS
v20.2.OS
v20.3.0.OS

v21.*

v21.0.0.OS
v21.1.0.OS

v23.*

v23.0.0.OS
v23.0.1.OS

v24.*

v24.0.0.OS

v26.*

v26.2.0.OS
v26.6.0.OS

v27.*

v27.0.0.OS
v27.0.1.OS
v27.0.2.OS

v28.*

v28.1.0.OS
v28.1.1.OS
v28.2.0.OS

v29.*

v29.0.0.OS