CVE-2021-46872

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.)

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jan 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-468735.3WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's CVE-2021-468756.1An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .ht CVE-2021-468765.3An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence CVE-2021-468777.5jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient CVE-2021-468787.8An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type confusion bug CVE-2021-468797.8An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in CVE-2021-468809.8x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverif CVE-2021-468817.5The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availabilit CVE-2021-468827.5The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availabilit CVE-2021-468837.5The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availabilit CVE-2021-468847.5The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availabilit CVE-2021-468857.5The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availabilit