CVE-2021-32302

MediumCVSS 6.1/10Last modified Jul 9, 2026

Description

Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information via the Upload File parameter.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Feb 27, 2023
Last modified
Jul 9, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-323059.8WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.CVE-2021-32365.5vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all methodCVE-2021-32399.8E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code oCVE-2021-323997.0net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.CVE-2021-324028.8Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configuratCVE-2021-324038.8Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protCVE-2021-324157.8EXEMSI MSI Wrapper Versions prior to 10.0.50 and at least since version 6.0.91 will introduce a local privilege escalation vulnerability in CVE-2021-324195.3An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmt_mtm_load_song function CVE-2021-32429.8DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.CVE-2021-324207.5dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.CVE-2021-324217.5dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.CVE-2021-324227.5dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.
CVE-2021-32302: Medium severity, CVSS 6.1 | Vulnix