Security Advisory

CVE-2021-29267

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-29 15:05:05

Last updated 2024-08-03 22:02:51

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature.

← Browse all CVEs View on cve.org ↗