CVE-2021-32542 MEDIUM

CVE-2021-32542: SysJust CTS Web - Reflected XSS

Vendor Sysjust
Product CTS Web
Weakness CWE-79 · XSS
Published May 28, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token that triggered the attack.

Key dates

02Disclosure timeline

May 28, 2021 CVE published
September 16, 2024 Record updated