CVE-2021-39391

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-39391
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39391.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-39391
Aliases
Published
2021-09-14T18:15:08Z
Modified
2026-07-09T05:44:53Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego v2.0.1 via the URI path in an HTTP request, which is activated by administrators viewing the "Request Statistics" page.

References

Affected packages

Git / github.com/beego/beego

Affected ranges

Type
GIT
Repo
https://github.com/beego/beego
Events
Introduced
c0d9d883c8005d9b8f231a3497a4ff09636359d4
Last Affected
c0d9d883c8005d9b8f231a3497a4ff09636359d4
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:beego:beego:2.0.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.0.1"
        },
        {
            "last_affected": "2.0.1"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.0.1
v2.*
v2.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39391.json"