Vulnerability · Published Oct 7, 2021 · Assigned by INCIBE
CVE-2021-3834Integria IMS vulnerable to Cross Site Scripting (XSS)
Medium 5.4
In plain English
A medium-severity cross-site scripting in Integria IMS from Ártica. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.6%top 51.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ártica | Integria IMS | 5.0.92 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
References
- https://integriaims.com/en/services/updates/ x_refsource_CONFIRM
- https://www.incibe.es/en/incibe-cert/notices/aviso/integria-ims-vulnerable-cross-site-scripting-xss x_refsource_CONFIRM