Montala Resourcespace 9.6 -

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:montala:resourcespace:9.6:-:*:*:*:*:*:*

part: a version: 9.6 update: -

VendorMontala (1c532a0f-a8cf-5096-bcbb-89f13d719507)
ProductResourcespace (ac9543ec-532c-56ba-ac94-e385635849eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/fabn/resourcespace purl2cpe 2026-06-01 10:16:27.628272
pkg:github/ivorypenguin/resourcespace purl2cpe 2026-06-01 10:16:27.628274
pkg:rpm/opensuse/resourcespace purl2cpe 2026-06-01 10:16:27.628275

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41951 vulnerable 2026-06-08 05:35:21.253721 Details available
ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the wordpress_user parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the context of the victim's browser.
Published: 2021-11-15T15:27:22.000Z
Updated: 2024-08-04T03:22:25.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41950 vulnerable 2026-06-08 05:35:21.252290 Details available
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the application to become unavailable to all users.
Published: 2021-11-15T15:52:56.000Z
Updated: 2024-08-04T03:22:25.694Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.