CVE-2021-32092

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-32092
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32092.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-32092
Published
2021-05-07T05:15:08.280Z
Modified
2026-07-09T01:30:53.483675Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter.

References

Affected packages

Git / github.com/nationalsecurityagency/emissary

Affected ranges

Type
GIT
Repo
https://github.com/nationalsecurityagency/emissary
Events
Introduced
5edf9717ac66548ac161b4ae3657235c87aec62a
Last affected
5edf9717ac66548ac161b4ae3657235c87aec62a
Database specific 
{
    "cpe": "cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.9.0"
        },
        {
            "last_affected": "5.9.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

5.*
5.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32092.json"