Approved changes feed: RSS · Atom

cpe:2.3:a:antsword_redis_project:antsword_redis:*:*:*:*:*:antsword:*:*

part: a version: * update: *

VendorAntsword Redis Project (ced0126e-3319-597b-aad7-ecc7b7c26482)
ProductAntsword Redis (972ae613-b2f2-503f-8330-3476688a4362)
Edition*
Language*
Software edition*
Target softwareantsword
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/antsword-store/as_redis purl2cpe 2026-06-01 10:15:32.259798

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41172 vulnerable 2026-06-08 05:35:19.899322 Self-XSS in AS_Redis
MEDIUM (6.4)
AS_Redis is an AntSword plugin for Redis. The Redis Manage plugin for AntSword prior to version 0.5 is vulnerable to Self-XSS due to due to insufficient input validation and sanitization via redis server configuration. Self-XSS in the plugin configuration leads to code execution. This issue is patched in version 0.5.
Published: 2021-10-26T14:00:12.000Z
Updated: 2024-08-04T02:59:31.617Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.