PT-2023-12202 · Ymfe Yapo · Ymfe Yapo

Publicado 2023-02-17 · Atualizado 2023-02-21 · CVE-2021-33237

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions YMFE yapo version 1.9.1

Description The issue allows an attacker to execute arbitrary code via the remark parameter of the interface edit page. This is a Cross Site Scripting vulnerability.

Recommendations For YMFE yapo version 1.9.1, avoid using the remark parameter in the interface edit page until the issue is resolved. As a temporary workaround, consider restricting access to the interface edit page to minimize the risk of exploitation.

Identificadores relacionados

CVE-2021-33237

Produtos afetados

Ymfe Yapo

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-33237 · Nota de Segurança
• https://t.me/cvenotify/44591 · Publicação no Telegram
• https://t.me/cibsecurity/58462 · Publicação no Telegram