CVE-2021-3914

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/asmallrye-healthNot-Known

References

Timeline

Published
Aug 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-391406.3XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391418.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391437.1Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in uses of TAR files byCVE-2021-391448.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391458.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391468.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391478.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391488.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391498.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-39155.7bookstack is vulnerable to Unrestricted Upload of File with Dangerous TypeCVE-2021-391508.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker CVE-2021-391518.5XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker
CVE-2021-3914: Medium severity, CVSS 6.1 | Vulnix