CVE-2021-36760

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Dec 7, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-367615.3The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF.CVE-2021-367627.5An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't en CVE-2021-367637.5In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.CVE-2021-367647.5In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer derefer CVE-2021-367657.5In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherN CVE-2021-367667.2Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/dashboard/system/envi CVE-2021-367679.8In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making CVE-2021-367695.3A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacke CVE-2021-36776.5A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authent CVE-2021-367707.8Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in t CVE-2021-367716.1Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS.CVE-2021-367726.1Zoho ManageEngine ADManager Plus before 7110 allows stored XSS.