← CVE Intelligence

CVE-2021-42117

UI Redressing in TopEase PUBLISHED

Description (CNA)

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution.

Affected (CNA)

Vendor / productVersions
Business-DNA Solutions GmbH / TopEaseaffected unspecified through 7.1.27

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.