Cross-Site Scripting Vulnerability in Faraday Edge Software
CVE-2021-27338
5.4MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-27338?
The Faraday Edge software allows for a Cross-Site Scripting (XSS) vulnerability through the 'network/create/' page, particularly affecting the network name parameter. This flaw can be exploited to inject malicious scripts into web applications, posing significant security risks to users and organizations utilizing the affected versions prior to 3.7.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.