PT-2021-18600 · Opentext · Opentext Content Server

Published 2021-02-26 · Updated 2021-03-04 · CVE-2021-3010

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenText Content Server version 20.3

Description The issue concerns multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface. A remote attacker can introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized.

Recommendations For OpenText Content Server version 20.3, consider implementing proper input sanitization for all form values to prevent the introduction of malicious JavaScript code. As a temporary workaround, restrict access to the web interface to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-3010

Affected Products

Opentext Content Server

References · 5

• 🔥 https://exploit-db.com/exploits/49578 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-3010 · Security Note
• https://osv.dev/vulnerability/CVE-2021-3010 · Vendor Advisory
• https://t.me/cibsecurity/24228 · Telegram Post
• https://opentext.com/products-and-solutions/products/enterprise-content-management/content-management · Note