CVE-2021-34370

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-343719.8Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSesCVE-2021-343727.8Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing codCVE-2021-343736.0Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflowCVE-2021-343746.7Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory cCVE-2021-343756.7Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might result in stack-basCVE-2021-343766.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restriction of operations witCVE-2021-343776.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restriction of operations witCVE-2021-343786.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restriction of operations wiCVE-2021-343796.7Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an I/O buffer parameterCVE-2021-34387.8A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalatioCVE-2021-343807.8Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might leaCVE-2021-343817.8Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow
CVE-2021-34370: Medium severity, CVSS 6.1 | Vulnix