PT-2021-14181 · Telop01 · Telop01

Apple502J · Published 2021-05-24 · Updated 2021-05-28 · CVE-2021-20724

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Telop01 free edition version 1.0.1 and earlier

Description: A reflected cross-site scripting issue in the admin page allows a remote attacker to inject an arbitrary script via unspecified vectors. This enables the attacker to execute malicious scripts on the victim's browser, potentially leading to unauthorized actions or data theft.

Recommendations: For Telop01 free edition version 1.0.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-20724

Affected Products

Telop01

References · 6

• https://osv.dev/vulnerability/CVE-2021-20724 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20724 · Security Note
• https://t.me/cvenotify/14908 · Telegram Post
• https://t.me/cvenotify/15155 · Telegram Post
• https://jvn.jp/en/jp/JVN53910556/index.html · Note
• https://php-factory.net/telop/01.php · Note