Description
REDCap 11.4.0之前的版本中存在 XSS 漏洞。该漏洞是由于应用程序在处理attrs参数数据时存在缺陷导致的。
REDCap CVE-2021-42136 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-42136
https://access.redhat.com/security/cve/cve-2021-42136
https://www.exploit-db.com/exploits/50877
https://avd.aquasec.com/nvd/2021/cve-2021-42136/
https://github.com/advisories/GHSA-q99w-xr78-49hh
https://avd.aliyun.com/detail?id=AVD-2021-42136
https://cve.imfht.com/detail/CVE-2021-42136