Cross Site Scripting Vulnerability in SLICAN WebCTI by SLICAN
CVE-2021-45813

6.1MEDIUM

Key Information:

Vendor

Slican

Status
Webcti
Vendor
CVE Published:
28 December 2021

What is CVE-2021-45813?

The SLICAN WebCTI product version 1.01 released in 2015 contains a vulnerability that allows an attacker to exploit Cross Site Scripting (XSS). By injecting malicious JavaScript code into the web application, the attacker can gain unauthorized access to user sessions, leading to session hijacking. This exploitation can ultimately result in unauthorized acquisition of user credentials, posing significant security risks for affected users.

References

https://drive.google.com/file/d/1oKuzCZob9-LOAp-pdGN0MYYB...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.