Description
Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Filtered Asset Search feature. A specific search criterion and operator combination in Filtered Asset Search could have allowed a user to pass code through the provided search field. This issue affects version 6.6.80 and prior, and is fixed in 6.6.81. If your Security Console currently falls on or within this affected version range, ensure that you update your Security Console to the latest version.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Rapid7 | Rapid7 Nexpose | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2021-26849 | Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Filtered Asset Search feature. A specific search criterion and operator combination in Filtered Asset Search could have allowed a user to pass code through the provided search field. This issue affects version 6.6.80 and prior, and is fixed in 6.6.81. If your Security Console currently falls on or within this affected version range, ensure that you update your Security Console to the latest version. |
References
| Link | Providers |
|---|---|
| https://docs.rapid7.com/release-notes/nexpose/20210505/ |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: rapid7
Published:
Updated: 2024-09-16T23:10:39.986Z
Reserved: 2021-05-05T00:00:00.000Z
Link: CVE-2021-3535
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-06-16T02:15:06.687
Modified: 2024-11-21T06:21:47.037
Link: CVE-2021-3535
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses